TITLE:
Autodesk Products Unspecified System Access Vulnerability

SECUNIA ADVISORY ID:
SA18682

VERIFY ADVISORY:
http://secunia.com/advisories/18682/

CRITICAL:
Moderately critical

IMPACT:
System access

WHERE:
>From local network

SOFTWARE:
Autodesk VIZ 2006
http://secunia.com/product/7337/
Autodesk Utility Design 2005
http://secunia.com/product/7335/
Autodesk Survey 2006
http://secunia.com/product/7332/
Autodesk Survey 2005
http://secunia.com/product/7333/
Autodesk Revit Structure 1.x
http://secunia.com/product/7331/
Autodesk Revit Building 8.x
http://secunia.com/product/7328/
Autodesk Revit 7.x
http://secunia.com/product/7329/
Autodesk Revit 6.x
http://secunia.com/product/7330/
Autodesk Raster Design 2006
http://secunia.com/product/7326/
Autodesk Raster Design 2005
http://secunia.com/product/7327/
Autodesk Map 3D 2006
http://secunia.com/product/7324/
Autodesk Map 3D 2005
http://secunia.com/product/7325/
Autodesk Land Desktop 2006
http://secunia.com/product/7321/
Autodesk Land Desktop 2005
http://secunia.com/product/7322/
Autodesk Inventor Series 9.x
http://secunia.com/product/4068/
Autodesk Inventor Series 10.x
http://secunia.com/product/7319/
Autodesk Inventor Professional 9.x
http://secunia.com/product/4067/
Autodesk Inventor Professional 10.x
http://secunia.com/product/7318/
Autodesk Civil Design 2005
http://secunia.com/product/7317/
Autodesk Civil 3D 2006
http://secunia.com/product/7314/
Autodesk Civil 3D 2005
http://secunia.com/product/7316/
Autodesk Building Systems 2006
http://secunia.com/product/7312/
Autodesk Building Systems 2005
http://secunia.com/product/7313/
Autodesk Architectural Desktop 2006
http://secunia.com/product/7311/
Autodesk Architectural Desktop 2005
http://secunia.com/product/3641/
Autodesk 3ds Max 8.x
http://secunia.com/product/7341/
Autodesk 3ds Max 7.x
http://secunia.com/product/7310/
AutoCAD Mechanical 2006
http://secunia.com/product/7308/
AutoCAD Mechanical 2005
http://secunia.com/product/7309/
AutoCAD LT 2006
http://secunia.com/product/7305/
AutoCAD LT 2005
http://secunia.com/product/7306/
AutoCAD Electrical 2006
http://secunia.com/product/7303/
AutoCAD Electrical 2005
http://secunia.com/product/7304/
AutoCAD 2006
http://secunia.com/product/7302/
AutoCAD 2005
http://secunia.com/product/3640/

DESCRIPTION:
A vulnerability has been reported in various Autodesk products, which
potentially can be exploited by malicious people to compromise a
vulnerable system.

No further details are currently available.

The vulnerability affects the following products:
* AutoCAD 2005
* AutoCAD 2006
* AutoCAD Electrical 2005
* AutoCAD Electrical 2006
* AutoCAD LT 2005
* AutoCAD LT 2006
* AutoCAD Mechanical 2005
* AutoCAD Mechanical 2006
* Autodesk 3ds Max 7
* Autodesk 3ds Max 8
* Autodesk Architectural Desktop 2005
* Autodesk Architectural Desktop 2006
* Autodesk Building Systems 2005
* Autodesk Building Systems 2006
* Autodesk Civil Design 2005
* Autodesk Civil 3D 2005
* Autodesk Civil 3D 2006
* Autodesk Inventor Professional 9
* Autodesk Inventor Professional 10
* Autodesk Inventor Series 9
* Autodesk Inventor Series 10
* Autodesk Land Desktop 2005
* Autodesk Land Desktop 2006
* Autodesk Map 3D 2005
* Autodesk Map 3D 2006
* Autodesk Raster Design 2005
* Autodesk Raster Design 2006
* Autodesk AutoCAD Revit Series 8.0 / Autodesk Revit Building 8.0
* Autodesk AutoCAD Revit Series 8.1 / Autodesk Revit Building 8.1
* Autodesk AutoCAD Revit Series R2 / Autodesk Revit 6.1
* Autodesk AutoCAD Revit Series R7 / Autodesk Revit 7.0
* Autodesk Revit Structure 1.0
* Autodesk Survey 2005
* Autodesk Survey 2006
* Autodesk Utility Design 2005
* Autodesk Utility Design 2006
* Autodesk Viz 2006

SOLUTION:
Apply hotfix (see vendor advisory).

PROVIDED AND/OR DISCOVERED BY:
Reported by the vendor.

ORIGINAL ADVISORY:
http://usa.autodesk.com/adsk/servlet/ps/dl/item?siteID=123112&id=5549329&linkID=4183232

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------