TITLE: Autodesk Products Unspecified System Access Vulnerability SECUNIA ADVISORY ID: SA18682 VERIFY ADVISORY: http://secunia.com/advisories/18682/ CRITICAL: Moderately critical IMPACT: System access WHERE: >From local network SOFTWARE: Autodesk VIZ 2006 http://secunia.com/product/7337/ Autodesk Utility Design 2005 http://secunia.com/product/7335/ Autodesk Survey 2006 http://secunia.com/product/7332/ Autodesk Survey 2005 http://secunia.com/product/7333/ Autodesk Revit Structure 1.x http://secunia.com/product/7331/ Autodesk Revit Building 8.x http://secunia.com/product/7328/ Autodesk Revit 7.x http://secunia.com/product/7329/ Autodesk Revit 6.x http://secunia.com/product/7330/ Autodesk Raster Design 2006 http://secunia.com/product/7326/ Autodesk Raster Design 2005 http://secunia.com/product/7327/ Autodesk Map 3D 2006 http://secunia.com/product/7324/ Autodesk Map 3D 2005 http://secunia.com/product/7325/ Autodesk Land Desktop 2006 http://secunia.com/product/7321/ Autodesk Land Desktop 2005 http://secunia.com/product/7322/ Autodesk Inventor Series 9.x http://secunia.com/product/4068/ Autodesk Inventor Series 10.x http://secunia.com/product/7319/ Autodesk Inventor Professional 9.x http://secunia.com/product/4067/ Autodesk Inventor Professional 10.x http://secunia.com/product/7318/ Autodesk Civil Design 2005 http://secunia.com/product/7317/ Autodesk Civil 3D 2006 http://secunia.com/product/7314/ Autodesk Civil 3D 2005 http://secunia.com/product/7316/ Autodesk Building Systems 2006 http://secunia.com/product/7312/ Autodesk Building Systems 2005 http://secunia.com/product/7313/ Autodesk Architectural Desktop 2006 http://secunia.com/product/7311/ Autodesk Architectural Desktop 2005 http://secunia.com/product/3641/ Autodesk 3ds Max 8.x http://secunia.com/product/7341/ Autodesk 3ds Max 7.x http://secunia.com/product/7310/ AutoCAD Mechanical 2006 http://secunia.com/product/7308/ AutoCAD Mechanical 2005 http://secunia.com/product/7309/ AutoCAD LT 2006 http://secunia.com/product/7305/ AutoCAD LT 2005 http://secunia.com/product/7306/ AutoCAD Electrical 2006 http://secunia.com/product/7303/ AutoCAD Electrical 2005 http://secunia.com/product/7304/ AutoCAD 2006 http://secunia.com/product/7302/ AutoCAD 2005 http://secunia.com/product/3640/ DESCRIPTION: A vulnerability has been reported in various Autodesk products, which potentially can be exploited by malicious people to compromise a vulnerable system. No further details are currently available. The vulnerability affects the following products: * AutoCAD 2005 * AutoCAD 2006 * AutoCAD Electrical 2005 * AutoCAD Electrical 2006 * AutoCAD LT 2005 * AutoCAD LT 2006 * AutoCAD Mechanical 2005 * AutoCAD Mechanical 2006 * Autodesk 3ds Max 7 * Autodesk 3ds Max 8 * Autodesk Architectural Desktop 2005 * Autodesk Architectural Desktop 2006 * Autodesk Building Systems 2005 * Autodesk Building Systems 2006 * Autodesk Civil Design 2005 * Autodesk Civil 3D 2005 * Autodesk Civil 3D 2006 * Autodesk Inventor Professional 9 * Autodesk Inventor Professional 10 * Autodesk Inventor Series 9 * Autodesk Inventor Series 10 * Autodesk Land Desktop 2005 * Autodesk Land Desktop 2006 * Autodesk Map 3D 2005 * Autodesk Map 3D 2006 * Autodesk Raster Design 2005 * Autodesk Raster Design 2006 * Autodesk AutoCAD Revit Series 8.0 / Autodesk Revit Building 8.0 * Autodesk AutoCAD Revit Series 8.1 / Autodesk Revit Building 8.1 * Autodesk AutoCAD Revit Series R2 / Autodesk Revit 6.1 * Autodesk AutoCAD Revit Series R7 / Autodesk Revit 7.0 * Autodesk Revit Structure 1.0 * Autodesk Survey 2005 * Autodesk Survey 2006 * Autodesk Utility Design 2005 * Autodesk Utility Design 2006 * Autodesk Viz 2006 SOLUTION: Apply hotfix (see vendor advisory). PROVIDED AND/OR DISCOVERED BY: Reported by the vendor. ORIGINAL ADVISORY: http://usa.autodesk.com/adsk/servlet/ps/dl/item?siteID=123112&id=5549329&linkID=4183232 ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------