bpmcdevitt/data_importer
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

added example captured data potential from advisory for autodesk

Browse source
This commit is contained in:
Brendan McDevitt 2022-05-20 17:28:56 -05:00
parent 9d0358e866
commit c4901695d9
1 changed files with 27 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

27
doc/cna_readme_notes/cnas_with_html_advisories.md
View file

@ -179,6 +179,33 @@ The page listed in the CNAList.json for this org is the advisory policy document
### Advisory
https://www.autodesk.com/trust/security-advisories
#### Captured Data Potential From Advisory
```
{
:bulletin_id => 'ADSK-SA-2022-0010',
:product_service_component => 'Autodesk® 3ds Max®',
:impact => 'Out-of-bound Read/Write',
:severity => 'High',
:original_publish => '5/4/2022',
:last_revised => '5/4/2022',
:summary => 'Applications and services that utilize Autodesk 3ds Max may be affected by Out-of-bound Read/Write vulnerabilities. Exploitation of these vulnerabilities may lead to remote code execution.',
:description => 'The details of the vulnerabilities are as follows: 1) CVE-2022-27531 - A maliciously crafted TIF file can be forced to read beyond allocated boundaries in Autodesk 3ds Max 2022, and 2021 when parsing the TIF files. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process. 2) CVE-2022-27532 - A maliciously crafted TIF file in Autodesk 3ds Max 2022 and 2021 can be used to write beyond the allocated buffer while parsing TIF files. This vulnerability in conjunction with other vulnerabilities could lead to arbitrary code execution.',
:affected_products =>[
{
:item => 'Autodesk® 3ds Max®',
:impacted_versions => '2022,2021',
:mitigated_versions => '2022.3.3, 2021.3.8',
:updated_source => 'Autodesk Desktop App, or Accounts Portal'
}
],
:revision_history => [
{
:revision => '1.0',
:date => '5/4/2022',
:description => 'Description: Initial Release of Security advisory'
}
]
}
```
## Avaya, Inc
### Advisory