CVE-2019-7360 : What You Need to Know

Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018, Autodesk AutoCAD P&ID 2018, Autodesk AutoCAD Plant 3D 2018, Autodesk AutoCAD LT 2018, and Autodesk Civil 3D 2018 are vulnerable to an exploitable use-after-free flaw in their DXF-parsing feature. An attacker can exploit this vulnerability by using a specially crafted DXF file, which can trigger a use-after-free condition and potentially lead to the execution of arbitrary code.

Understanding CVE-2019-7360

This CVE identifies a critical vulnerability affecting various Autodesk products, potentially allowing attackers to execute arbitrary code.

What is CVE-2019-7360?

CVE-2019-7360 is an exploitable use-after-free vulnerability found in the DXF-parsing functionality of multiple Autodesk software versions.

The Impact of CVE-2019-7360

The vulnerability could be exploited by malicious actors to execute arbitrary code on systems running the affected Autodesk products, posing a significant security risk.

Technical Details of CVE-2019-7360

Autodesk products are susceptible to a critical security flaw that could lead to severe consequences if exploited.

Vulnerability Description

The vulnerability stems from a use-after-free issue in the DXF-parsing feature of Autodesk Advance Steel 2018, AutoCAD 2018, and other related products.

Affected Systems and Versions

Autodesk Civil 3D 2018
Autodesk Advance Steel 2018
Autodesk AutoCAD 2018
Autodesk AutoCAD Architecture 2018
Autodesk AutoCAD Electrical 2018
Autodesk AutoCAD Map 3D 2018
Autodesk AutoCAD Mechanical 2018
Autodesk AutoCAD MEP 2018
Autodesk AutoCAD P&ID 2018
Autodesk AutoCAD Plant 3D 2018
Autodesk AutoCAD LT 2018

Exploitation Mechanism

The vulnerability can be exploited by crafting a malicious DXF file, triggering a use-after-free condition that may result in the execution of unauthorized code.

Mitigation and Prevention

It is crucial to take immediate action to mitigate the risks associated with CVE-2019-7360.

Immediate Steps to Take

Apply security patches provided by Autodesk promptly.
Avoid opening DXF files from untrusted or unknown sources.
Implement network security measures to prevent unauthorized access.

Long-Term Security Practices

Regularly update and patch Autodesk software to address security vulnerabilities.
Conduct security training for users to recognize and report suspicious activities.
Employ robust endpoint protection and intrusion detection systems.

Patching and Updates

Autodesk has released security patches to address the vulnerability. Users should ensure that their software is updated to the latest patched versions.