CVE-2015-8571 Integer overflow in n/a

What is CVE-2015-8571?

CVE-2015-8571 is a medium-severity vulnerability in n/a, published on 15 Dec 2015. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Integer overflow in Autodesk Design Review (ADR) before 2013 Hotfix 2 allows remote attackers to execute arbitrary code via a crafted biClrUsed value in a BMP file, which triggers a buffer overflow.

Weakness: CWE-189

Which versions are affected by CVE-2015-8571?

It affects 1 product.

Products include Autodesk Design Review.

How do I fix CVE-2015-8571?

No fix has been published for CVE-2015-8571 yet. Limit exposure of the affected software until one is available.

Is CVE-2015-8571 being exploited?

There is no known exploitation of CVE-2015-8571 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2008-4471 Path traversal in n/a Critical 9.3
• CVE-2008-4472 Code injection in n/a Critical 9.3
• CVE-2022-27864 Memory corruption in Autodesk Design Review High 8.8
• CVE-2021-27033 Double Free File Parsing Vulnerability in Autodesk Design Review High 8.1
• CVE-2022-41306 Memory corruption in Autodesk® Design Review High 7.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-6jf4-hp47-vfqx.