CVE-2021-27033

{"id": "CVE-2021-27033", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "psirt@autodesk.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "psirt@autodesk.com", "affectedData": [{"cpes": ["cpe:2.3:a:autodesk:design_review:2018:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:design_review:2017:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:design_review:2013:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:design_review:2012:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:design_review:2011:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "Design Review", "versions": [{"status": "affected", "version": "2018.0.0, 2017.0.0, 2013.0.0, 2012.0.0, 2011.0.0", "lessThan": "2018.0.0", "versionType": "semver"}], "defaultStatus": "unaffected"}]}], "published": "2021-07-09T15:15:07.537", "references": [{"url": "https://www.autodesk.com/products/autodesk-access/overview", "source": "psirt@autodesk.com"}, {"url": "https://www.autodesk.com/support/technical/article/caas/sfdcarticles/sfdcarticles/Where-can-I-download-the-latest-update-of-AutoCAD-AutoCAD-LT-2022.html", "source": "psirt@autodesk.com"}, {"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004", "tags": ["Vendor Advisory"], "source": "psirt@autodesk.com"}, {"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "psirt@autodesk.com", "description": [{"lang": "en", "value": "CWE-415"}]}, {"type": "Secondary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-415"}]}], "descriptions": [{"lang": "en", "value": "A maliciously crafted PDF file, when opened by a user in Autodesk Design Review, can trigger a Double Free vulnerability in the Autodesk Design Review application. A malicious actor may leverage this vulnerability to cause memory corruption and execute arbitrary code in the context of the current process."}, {"lang": "es", "value": "Una vulnerabilidad Double Free permite a los atacantes remotos ejecutar c\u00f3digo arbitrario en archivos PDF dentro de las instalaciones afectadas de Autodesk Design Review 2018, 2017, 2013, 2012, 2011. Se requiere la interacci\u00f3n del usuario para explotar esta vulnerabilidad, ya que el objetivo debe visitar una p\u00e1gina maliciosa o abrir un archivo malicioso"}], "lastModified": "2026-06-19T14:16:20.473", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:autodesk:design_review:2011:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83CF6CDF-806C-4DC5-B572-C1C2BC2C25F2"}, {"criteria": "cpe:2.3:a:autodesk:design_review:2012:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2A78B6F8-DF84-4E6C-A247-0F6D2F8CA679"}, {"criteria": "cpe:2.3:a:autodesk:design_review:2013:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DCD2CA9B-16E1-4BE7-A4E1-A9817A503958"}, {"criteria": "cpe:2.3:a:autodesk:design_review:2017:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "31F2529F-ECF0-4568-BBDC-82B396A52332"}, {"criteria": "cpe:2.3:a:autodesk:design_review:2018:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7D07C55F-1D23-4E2B-AC1E-67D735F800B7"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@autodesk.com"}