Unscored severity · published Jul 18, 2013
CVE-2013-3665
Unspecified vulnerability in Autodesk AutoCAD through 2014, AutoCAD LT through 2014, and DWG TrueView through 2014 allows remote attackers to execute arbitrary code via a crafted…
–
CVSS
2.7%
EPSS
No
On KEV
Description
Unspecified vulnerability in Autodesk AutoCAD through 2014, AutoCAD LT through 2014, and DWG TrueView through 2014 allows remote attackers to execute arbitrary code via a crafted DWG file.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.7% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AU
Autocad · Autodesk
2011; 2012; 2013; 2014 · source: NVD
AA
Autocad Architecture · Autodesk
2011; 2012; 2013; 2014 · source: NVD
AC
Autocad Civil 3d · Autodesk
2011; 2012; 2013; 2014 · source: NVD
AE
Autocad Ecscad · Autodesk
2011; 2012; 2013; 2014 · source: NVD
AE
Autocad Electrical · Autodesk
2011; 2012; 2013; 2014 · source: NVD
AL
Autocad LT · Autodesk
2011; 2012; 2013; 2014 · source: NVD
AM
Autocad Map 3d · Autodesk
2011; 2012; 2013; 2014 · source: NVD
AM
Autocad Mechanical · Autodesk
2011; 2012; 2013; 2014 · source: NVD
AM
Autocad Mep · Autodesk
2011; 2012; 2013; 2014 · source: NVD
AP
Autocad P&id · Autodesk
2011; 2012; 2013; 2014 · source: NVD
AP
Autocad Plant 3d · Autodesk
2011; 2012; 2013; 2014 · source: NVD
AS
Autocad Structural Detailing · Autodesk
2011; 2012; 2013; 2014 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-3665
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-3665
Vendor Advisory
http://images.autodesk.com/adsk/files/Autodesk_AutoCAD_Code_Execution_Vulnerability_Hotfix_Readme.pdf
Patch
http://usa.autodesk.com/adsk/servlet/ps/dl/item?id=21972896&linkID=9240618&siteID=123112
More from Autocad
9.8
CVE-2023-29076
A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption vulnerability
9.8
CVE-2023-29075
A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write
9.8
CVE-2023-29074
A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write
9.8
CVE-2023-29073
A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow
7.8
CVE-2026-7406
BMP File Parsing Untrusted Pointer Dereference in certain Autodesk products