Files
CVEs-PoC/2022/CVE-2022-27872.md
T
2024-05-25 21:48:12 +02:00

19 lines
912 B
Markdown

### [CVE-2022-27872](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27872)
![](https://img.shields.io/static/v1?label=Product&message=Navisworks&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Untrusted%20Pointer%20Dereference%20vuln&color=brighgreen)
### Description
A maliciously crafted PDF file may be used to dereference a pointer for read or write operation while parsing PDF files in Autodesk Navisworks 2022. The vulnerability exists because the application fails to handle a crafted PDF file, which causes an unhandled exception. An attacker can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/0xCyberY/CVE-T4PDF
- https://github.com/ARPSyndicate/cvemon