CVEvulnerability

CVE-2019-7364

7.8 HIGH Published 2019-08-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-08-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-427

Description

DLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D and version 2017 of AutoCAD P&ID. An attacker may trick a user into opening a malicious DWG file that may leverage a DLL preloading vulnerability in AutoCAD which may result in code execution.

Affected configurations

• autodesk advance steel 2017 • autodesk advance steel 2018 • autodesk advance steel 2019 • autodesk advance steel 2020 • autodesk autocad 2017 • autodesk autocad 2018 • autodesk autocad 2019 • autodesk autocad 2020 • autodesk autocad architecture 2017 • autodesk autocad architecture 2018 • autodesk autocad architecture 2019 • autodesk autocad architecture 2020 • autodesk autocad electrical 2017 • autodesk autocad electrical 2018 • autodesk autocad electrical 2019 • autodesk autocad electrical 2020 • autodesk autocad lt 2017 • autodesk autocad lt 2018 • autodesk autocad lt 2019 • autodesk autocad lt 2020 • autodesk autocad map 3d 2017 • autodesk autocad map 3d 2018 • autodesk autocad map 3d 2019 • autodesk autocad map 3d 2020 • autodesk autocad mechanical 2017 • autodesk autocad mechanical 2018 • autodesk autocad mechanical 2019 • autodesk autocad mechanical 2020 • autodesk autocad mep 2017 • autodesk autocad mep 2018 • autodesk autocad mep 2019 • autodesk autocad mep 2020 • autodesk autocad p\&id 2017 • autodesk autocad plant 3d 2017 • autodesk autocad plant 3d 2018 • autodesk autocad plant 3d 2019 • autodesk autocad plant 3d 2020 • autodesk civil 3d 2017 • autodesk civil 3d 2018 • autodesk civil 3d 2019 • autodesk civil 3d 2020

Related

Weakness · CWE (1)

  • CWE-427 Uncontrolled Search Path Element weakness

References