« Volver al listado

CVE-2022-42939

Estado: ModificadaAlta (7.8)—

A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (11)

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-42939",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2022-42939",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-05-07T19:31:21.236733Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      },
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@autodesk.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Autodesk Design Review",
          "versions": [
            {
              "status": "affected",
              "version": "2018, 2017, 2013, 2012, 2011"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-10-21T16:15:11.863",
  "references": [
    {
      "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "psirt@autodesk.com"
    },
    {
      "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ]
    },
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process."
    },
    {
      "lang": "es",
      "value": "Un archivo TGA diseñado de forma maliciosa cuando es consumido mediante la aplicación DesignReview.exe podría conllevar a una vulnerabilidad de corrupción de memoria. Esta vulnerabilidad, junto con otras, podría conllevar a una ejecución de código en el contexto del proceso actual"
    }
  ],
  "lastModified": "2026-06-17T05:05:37.750",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:autodesk:autocad:2019:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "411DC826-735A-4BEB-84BE-9250F97F612E"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad:2020:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E30E2562-D38E-4764-874E-5B2FCF5639E5"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "88B2C295-D091-4C1D-8285-4309967707BC"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EACE09F2-A323-4E4B-9A35-4EBAE3864E6C"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:macos:*:*",
              "vulnerable": true,
              "matchCriteriaId": "68FC54D1-B4FC-404E-9742-72F8340FE3C7"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2241C287-9396-4AD8-B93C-3596394AB2D3"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_advance_steel:2019:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9B1CAD53-7C63-4E5D-BD2E-364A7A87AA1E"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_advance_steel:2020:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "127F5A79-8E66-4ABD-8D88-8891C6D670D5"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_advance_steel:2021:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "37D8982C-E506-4988-AA97-BDF1B1C3D71A"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_advance_steel:2022:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "002AC200-6AE2-4817-91D3-957DA3AC9787"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_advance_steel:2023:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E881C720-E487-463E-A364-A1F9EC3C1D24"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_architecture:2019:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9275E76C-2A79-462A-A9D3-D0B6BBCDD0CC"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_architecture:2020:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B7DFA12E-48C5-47B9-BD9F-1AFACBF4E1EA"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_architecture:2021:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "535A5D39-1C82-4301-9E5B-C9E0D75F38B9"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "316615EC-BC9F-4B6A-8163-EBECC480EFDE"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_architecture:2023:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "546AFB2D-F78A-40C2-AC55-7D07EF0BDC7A"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_civil_3d:2019:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AB3A878B-2142-404F-BCF4-BB508674C6C4"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_civil_3d:2020:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "64F2EC88-168D-4DD1-9ADA-3F9FA60D6E35"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_civil_3d:2021:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5D73C803-7567-4C1D-B62A-C3C52369022D"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_civil_3d:2022:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C5F77B03-3221-4564-B4FF-7BF7EEC1C5B6"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_civil_3d:2023:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C6E001C0-0D7B-44ED-BBE8-E6635C45F988"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_electrical:2019:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A10DE5AF-1718-4899-9238-CFFDC72D05B7"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_electrical:2020:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E388264D-D2D4-4BE4-9097-8F547D73ABE5"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_electrical:2021:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "16611BAA-C200-4C8B-823F-1AB95F5E1317"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E2DC5114-48D2-4D85-8E80-B4BCB0FD78F5"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_electrical:2023:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A2949D87-C1FA-43C3-8F1F-08ED7A64F302"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_lt:2019:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "03682B7E-1CF1-4456-A51F-A6ADFC177935"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_lt:2020:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "371C5F60-4959-40C7-93E1-A01510A95115"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_lt:2021:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D83FB4C7-B374-4907-8E2B-EEE61C8339E7"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_lt:2022:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "601676EC-2EB4-45D0-B1AE-0980CBD68770"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_lt:2022:*:*:*:*:macos:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4A2EF334-E4E2-40DA-BD51-B74EE1E0ACCF"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_lt:2023:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "99924DDE-3D49-4D37-A361-69B28E7B94A3"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_map_3d:2019:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "04E05510-B21B-4DDD-88D7-CEB8963E1AFB"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_map_3d:2020:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D4CD010A-FDBC-40F9-95AC-0CD8388B85D1"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_map_3d:2021:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FC99E0F3-AA11-4390-A7C0-5BBFCDA94E3F"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "33AA60CF-611C-45FC-92F8-7517D87B1645"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_map_3d:2023:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "15A36E1F-964C-4DF2-91D1-D37ECEFC1C86"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_mechanical:2019:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "19255CEC-6161-4D44-B87E-52E86DF4FBA7"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_mechanical:2020:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7147F378-DFB0-48A8-8B05-8777E1CC7F90"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_mechanical:2021:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3B5C858C-4A01-4916-BE3E-B9056D67CF5F"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7EB83A4A-D4C2-4509-BD49-15B9BBC7BF97"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_mechanical:2023:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DCF7910A-432F-419E-96E0-25D638A6F298"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_mep:2019:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3F608B1C-BA96-4EA8-A540-83870262CBC1"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_mep:2020:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7CFAAD19-6248-42CB-B177-EC2E5141A953"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_mep:2021:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1C52D90B-578B-4281-BF0E-B7CDA425ED05"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4C8AD4F3-AA82-49F5-A18A-85127FDB8B95"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_mep:2023:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DF8D9BA5-A043-42DB-A524-6728D3BF2B90"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_plant_3d:2019:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4E536B0D-4C95-4589-981A-2F8A6C4B44DC"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_plant_3d:2020:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3FBDD3AC-FA00-462F-AA13-5A75B5D50689"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_plant_3d:2021:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "73E2E9E8-2269-4729-8D8F-3C26974F5FD2"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "452A1A75-C59A-43AB-9C43-BA49EB95C39C"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:autocad_plant_3d:2023:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "07CB7F37-E6D4-40F3-85BA-EC060E923505"
            },
            {
              "criteria": "cpe:2.3:a:autodesk:design_review:2018:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "213232B9-A40B-436D-A66A-B65C49D59BE6"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@autodesk.com"
}