Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Untrusted Search Path vulnerability in Autodesk Revit
Vulnerability Description
A maliciously crafted DLL file, when placed in the same directory as an RVT file could be loaded by Autodesk Revit, and execute arbitrary code in the context of the current process due to an untrusted search patch being utilized.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
不可信的搜索路径
Vulnerability Title
Autodesk Revit 安全漏洞
Vulnerability Description
Autodesk Revit是美国Autodesk公司的一套建筑信息模型软件。 Autodesk Revit存在安全漏洞，该漏洞源于如果将恶意制作的 DLL 文件与 RVT 文件放在同一目录中，则 Autodesk Revit 可能会加载该文件，并且由于使用了不受信任的搜索补丁，因此该文件可能会在当前进程的环境中执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A