bruiser has discovered a vulnerability in Autodesk Design Review, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to the AdView.AdViewer.1 ActiveX control (AdView.dll) including the insecure "SaveAs()" method. This can be exploited to overwrite arbitrary files on the system in the context of the currently logged-on user.

Successful exploitation allows execution of arbitrary code.

The vulnerability is confirmed in AdView.dll version 9.1.0.127 included in Autodesk Design Review 2009 Service Pack 1. Other versions may also be affected.

Solution
Set the kill-bit for the affected ActiveX control.

Provided and/or discovered by
bruiser, Nine Situations Group

Changelog
Further details available in Customer Area

Original Advisory
http://retrogod.altervista.org/9sg_autodesk_revit_arch_2009_exploit.html

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area