Security advisory

Description

The details of the vulnerabilities are as follows:

1. CVE-2019-7358: An attacker may convince a victim to open a malicious DXF file that may cause a heap overflow which may result in code execution.
   
   
2. CVE-2019-7359: An attacker may convince a victim to open a malicious DXF file with too many cell margins populating an AcCellMargin object and may cause a heap overflow which may result in code execution.
   
   
3. CVE-2019-7360: An attacker may convince a victim to open a malicious DXF file that may trigger a use-after-free vulnerability which may result in code execution.
   
   
4. CVE-2019-7361: An attacker may convince a victim to open a malicious action micro (.actm) file that has serialized data, which may trigger a code execution.
   

Recommendations

Autodesk highly recommends that customers of the affected products obtain and apply the latest Security Patch for their products via the Autodesk download center.

Acknowledgements

We would like to thank Cory Duplantis from Cisco Talos (http://talosintelligence.com/vulnerability-reports/) for reporting CVE-2019-7358, CVE-2019-7359, and CVE-2019-7360.

We would like to thank Tim Carrington from MWR Infosecurity for reporting CVE-2019-7361.

Related Information

The following CVE’s have been reserved as a result of the remediation activities. Details regarding each CVE are available here: https://cve.mitre.org

CVE-2019-7358: Exploitable heap overflow vulnerability exists in the DXF-parsing functionality.
CVE-2019-7359: Exploitable heap overflow vulnerability exists in the AcCellMargin handling code.
CVE-2019-7360: Exploitable use-after-free vulnerability exists in the DXF-parsing functionality.
CVE-2019-7361: Insecure deserialization of .actm file can lead to execution of arbitrary code.

Revision History