CVE-2021-27033 — Double Free in Design Review

CWE-415 — Double Free3 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.9%
top 24.41%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Autodesk Design Review
Timeline
PublishedJul 9
Latest updateMay 24

Description

A Double Free vulnerability allows remote attackers to execute arbitrary code on PDF files within affected installations of Autodesk Design Review 2018, 2017, 2013, 2012, 2011. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages1 packages

▶NVDautodesk/design_review5 versions+4

🔴Vulnerability Details

2
GHSA
GHSA-65m4-497r-hv9h: A Double Free vulnerability allows remote attackers to execute arbitrary code on PDF files within affected installations of Autodesk Design Review↗2022-05-24
▶
CVEList
CVE-2021-27033: A Double Free vulnerability allows remote attackers to execute arbitrary code on PDF files within affected installations of Autodesk Design Review 201↗2021-07-09
▶
CVE-2021-27033 — Double Free in Autodesk Design Review | cvebase