QwikSec

Security Database

CVE

CWE

Training

CVE-2015-8572

Published: Dec 15, 2015

Modified: Sep 16, 2024

PUBLISHED

Description

Multiple buffer overflows in Autodesk Design Review (ADR) before 2013 Hotfix 2 allow remote attackers to execute arbitrary code via crafted RLE data in a (1) BMP or (2) FLI file, (3) encoded scan lines in a PCX file, or (4) DataSubBlock or (5) GlobalColorTable in a GIF file.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.zerodayinitiative.com/advisories/ZDI-15-615

x_refsource_MISC

http://www.zerodayinitiative.com/advisories/ZDI-15-620

x_refsource_MISC

http://www.zerodayinitiative.com/advisories/ZDI-15-619

x_refsource_MISC

http://www.zerodayinitiative.com/advisories/ZDI-15-618

x_refsource_MISC

http://www.zerodayinitiative.com/advisories/ZDI-15-616

x_refsource_MISC

https://knowledge.autodesk.com/support/design-review/downloads/caas/downloads/content/autodesk-design-review-2013-hotfix.html

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.