1. Home
  2. CVE Database
  3. CVE-2019-7359
HIGH · 7.8

CVE-2019-7359

An exploitable heap overflow vulnerability in the AcCellMargin handling code in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018...

Vulnerability Description

An exploitable heap overflow vulnerability in the AcCellMargin handling code in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018, Autodesk AutoCAD P&ID 2018, Autodesk AutoCAD Plant 3D 2018, Autodesk AutoCAD LT 2018, and Autodesk Civil 3D 2018. A specially crafted DXF file with too many cell margins populating an AcCellMargin object may cause a heap overflow, resulting in code execution.

CVSS Score

7.8

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
AutodeskAdvance Steel2018
AutodeskAutocad2018
AutodeskAutocad Architecture2018
AutodeskAutocad Electrical2018
AutodeskAutocad Lt2018
AutodeskAutocad Map 3D2018
AutodeskAutocad Mechanical2018
AutodeskAutocad Mep2018
AutodeskAutocad P\&Id2018
AutodeskAutocad Plant 3D2018
AutodeskCivil 3D2018

Related Weaknesses (CWE)

CWE-787

References

FAQ

What is CVE-2019-7359?

CVE-2019-7359 is a vulnerability with a CVSS score of 7.8 (HIGH). An exploitable heap overflow vulnerability in the AcCellMargin handling code in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018...

How severe is CVE-2019-7359?

CVE-2019-7359 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-7359?

Check the references section above for vendor advisories and patch information. Affected products include: Autodesk Advance Steel, Autodesk Autocad, Autodesk Autocad Architecture, Autodesk Autocad Electrical, Autodesk Autocad Lt.