CVE-2019-7362

HIGH

Autodesk Design Review <2019 - Code Injection

Title source: llm

Description

DLL preloading vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF file that may leverage a DLL preloading vulnerability, which may result in code execution.

References (1)

[Patch, Vendor Advisory] https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0002

Scores

CVSS v3 7.8

EPSS 0.0037

EPSS Percentile 58.3%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE

CWE-427

Status published

Affected Products (4)

autodesk/design_review

Timeline

Published Aug 23, 2019

Tracked Since Feb 18, 2026