« Volver al listado

CVE-2019-7362

Estado: ModificadaAlta (7.8)—

DLL preloading vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF file that may leverage a DLL preloading vulnerability, which may result in code execution.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Autodesk — Design Review

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2019-7362",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@autodesk.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Autodesk Design Review",
          "versions": [
            {
              "status": "affected",
              "version": "2011, 2012, 2013, 2018"
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-08-23T20:15:10.503",
  "references": [
    {
      "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0002",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@autodesk.com"
    },
    {
      "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0002",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-427"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "DLL preloading vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF file that may leverage a DLL preloading vulnerability, which may result in code execution."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de precarga de DLL en las versiones 2011, 2012, 2013 y 2018 de Autodesk Design Review. Un atacante puede engañar a un usuario para que abra un archivo DWF malicioso que puede aprovechar una vulnerabilidad de precarga de DLL, que puede provocar la ejecución del código."
    }
  ],
  "lastModified": "2026-06-17T02:40:31.433",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:autodesk:design_review:2011:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "83CF6CDF-806C-4DC5-B572-C1C2BC2C25F2"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:design_review:2012:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2A78B6F8-DF84-4E6C-A247-0F6D2F8CA679"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:design_review:2013:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DCD2CA9B-16E1-4BE7-A4E1-A9817A503958"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:design_review:2018:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7D07C55F-1D23-4E2B-AC1E-67D735F800B7"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@autodesk.com"
}