CVE-2019-7360

CVE-2019-7360: vulnerability in Autodesk Advance Steel

Published · Updated

Follow this CVE+ Monitor AutoCAD+ Monitor Civil

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.6%
An exploitable use-after-free vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018, Autodesk AutoCAD P&ID 2018, Autodesk AutoCAD Plant 3D 2018, Autodesk AutoCAD LT 2018, and Autodesk Civil 3D 2018. A specially crafted DXF file may trigger a use-after-free, resulting in code execution.
Affected products
Autodesk · Autodesk Advance SteelAutodesk · Autodesk AutoCADAutodesk · Autodesk AutoCAD ArchitectureAutodesk · Autodesk AutoCAD ElectricalAutodesk · Autodesk AutoCAD LTAutodesk · Autodesk AutoCAD Map 3DAutodesk · Autodesk AutoCAD MechanicalAutodesk · Autodesk AutoCAD MEPAutodesk · Autodesk AutoCAD P&IDAutodesk · Autodesk AutoCAD Plant 3DAutodesk · Autodesk Civil 3D
Related CVEs — Autodesk Advance Steel

In the same product, most dangerous first.

CVE-2019-7359—CVE-2019-7359EPSS 1.6%CVE-2019-7358—CVE-2019-7358EPSS 1.6%CVE-2019-7361—CVE-2019-7361EPSS 1.4%