{"id":"CVE-2021-27034","state":"PUBLISHED","title":"A heap-based buffer overflow could occur while parsing PICT, PCX, RCL or TIFF files in Autodesk Design Review 2018, 2017, 2013, 2012, 2011. This vulnerability can be exploited to e","description":"A heap-based buffer overflow could occur while parsing PICT, PCX, RCL or TIFF files in Autodesk Design Review 2018, 2017, 2013, 2012, 2011. This vulnerability can be exploited to execute arbitrary code.","publishedAt":"2021-07-09T14:16:05.000Z","updatedAt":"2024-08-03T20:40:47.208Z","severity":null,"assigner":"autodesk","products":["n/a Autodesk Design Review"],"affected":[{"vendor":"n/a","product":"Autodesk Design Review","versions":[{"version":"2018, 2017, 2013, 2012, 2011","status":"affected"}]}],"references":["https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0003","https://www.zerodayinitiative.com/advisories/ZDI-21-1127/","https://www.zerodayinitiative.com/advisories/ZDI-21-1132/","https://www.zerodayinitiative.com/advisories/ZDI-21-1125/","https://www.zerodayinitiative.com/advisories/ZDI-21-1126/","https://www.zerodayinitiative.com/advisories/ZDI-21-1128/","https://www.zerodayinitiative.com/advisories/ZDI-21-1129/","https://www.zerodayinitiative.com/advisories/ZDI-21-1130/","https://www.zerodayinitiative.com/advisories/ZDI-21-1131/"],"weaknesses":[],"ingestedAt":"2026-10-29T19:48:15.637Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/27xxx/CVE-2021-27034.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2021-27034","state":"PUBLISHED","datePublished":"2021-07-09T14:16:05.000Z","dateUpdated":"2024-08-03T20:40:47.208Z","assignerShortName":"autodesk","assignerOrgId":"7e40ea87-bc65-4944-9723-dd79dd760601","dateReserved":"2021-02-09T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A heap-based buffer overflow could occur while parsing PICT, PCX, RCL or TIFF files in Autodesk Design Review 2018, 2017, 2013, 2012, 2011. This vulnerability can be exploited to execute arbitrary code."}],"affected":[{"vendor":"n/a","product":"Autodesk Design Review","versions":[{"version":"2018, 2017, 2013, 2012, 2011","status":"affected"}]}],"references":[{"url":"https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0003","tags":["x_refsource_MISC"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1127/","tags":["x_refsource_MISC"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1132/","tags":["x_refsource_MISC"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1125/","tags":["x_refsource_MISC"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1126/","tags":["x_refsource_MISC"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1128/","tags":["x_refsource_MISC"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1129/","tags":["x_refsource_MISC"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1130/","tags":["x_refsource_MISC"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1131/","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"Heap Overflow Vulnerability","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"autodesk","dateUpdated":"2021-11-09T13:25:05.000Z","orgId":"7e40ea87-bc65-4944-9723-dd79dd760601"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@autodesk.com","ID":"CVE-2021-27034","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Autodesk Design Review","version":{"version_data":[{"version_value":"2018, 2017, 2013, 2012, 2011"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A heap-based buffer overflow could occur while parsing PICT, PCX, RCL or TIFF files in Autodesk Design Review 2018, 2017, 2013, 2012, 2011. This vulnerability can be exploited to execute arbitrary code."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Heap Overflow Vulnerability"}]}]},"references":{"reference_data":[{"name":"https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0003","refsource":"MISC","url":"https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0003"},{"name":"https://www.zerodayinitiative.com/advisories/ZDI-21-1127/","refsource":"MISC","url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1127/"},{"name":"https://www.zerodayinitiative.com/advisories/ZDI-21-1132/","refsource":"MISC","url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1132/"},{"name":"https://www.zerodayinitiative.com/advisories/ZDI-21-1125/","refsource":"MISC","url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1125/"},{"name":"https://www.zerodayinitiative.com/advisories/ZDI-21-1126/","refsource":"MISC","url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1126/"},{"name":"https://www.zerodayinitiative.com/advisories/ZDI-21-1128/","refsource":"MISC","url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1128/"},{"name":"https://www.zerodayinitiative.com/advisories/ZDI-21-1129/","refsource":"MISC","url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1129/"},{"name":"https://www.zerodayinitiative.com/advisories/ZDI-21-1130/","refsource":"MISC","url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1130/"},{"name":"https://www.zerodayinitiative.com/advisories/ZDI-21-1131/","refsource":"MISC","url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1131/"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0003","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1127/","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1132/","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1125/","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1126/","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1128/","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1129/","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1130/","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-21-1131/","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T20:40:47.208Z"}}]}}}