AutoDesk: CVE-2023-27911 Heap buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior
🔗 CVE IDs covered (1)
📋 Description
Why is this AutoDesk CVE included in the Security Update Guide? The vulnerability assigned to this CVE is in AutoDesk software which is consumed by the Microsoft products listed in the Security Updates table. It is being documented in the Security Update Guide to announce that the latest builds of these products are no longer vulnerable. Please see Security Update Guide Supports CVEs Assigned by Industry Partners for more information.
🎯 Affected products19
- 3D Viewer
- Microsoft 365 Apps for Enterprise for 32-bit Systems
- Microsoft 365 Apps for Enterprise for 64-bit Systems
- Microsoft Office 2019 for 32-bit editions
- Microsoft Office 2019 for 64-bit editions
- Microsoft Office LTSC 2021 for 32-bit editions
- Microsoft Office LTSC 2021 for 64-bit editions
- Microsoft Visio 2016 (32-bit edition)
- Microsoft Visio 2016 (64-bit edition)
- Microsoft Visual Studio 2013 Update 5
- Microsoft Visual Studio 2015 Update 3
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- Microsoft Visual Studio 2022 version 17.0
- Microsoft Visual Studio 2022 version 17.2
- Microsoft Visual Studio 2022 version 17.4
- Microsoft Visual Studio 2022 version 17.6
- Microsoft Visual Studio 2022 version 17.8
- Microsoft Visual Studio 2022 version 17.9
✅ Remediation
KBRelease Notes (Security Update) — fixed build 17.8.8 KBRelease Notes (Security Update) — fixed build 17.9.3 KBClick to Run (Security Update) — fixed build https://aka.ms/OfficeSecurityReleases KB5002565 (Other) — fixed build 5439.1000 KBRelease Notes (Security Update) — fixed build 7.2306.12012.0 KBRelease Notes (Security Update) — fixed build 15.9.55 KBRelease Notes (Security Update) — fixed build 17.2.16 KBRelease Notes (Security Update) — fixed build 16.11.27 KBRelease Notes (Security Update) — fixed build 17.0.22 KB5026454 (Security Update) — fixed build 12.0.40702.0 KB5026455 (Security Update) — fixed build 14.0.27554.0 KBRelease Notes (Security Update) — fixed build 17.4.17 KBRelease Notes (Security Update) — fixed build 17.6.13
🔗 References (21)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-27911
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.8
- referencehttps://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.9
- referencehttps://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates
- referencehttps://support.microsoft.com/help/5002565
- patchhttps://www.microsoft.com/en-us/p/3d-viewer/9nblggh42ths?activetab=pivot:overviewtab
- patchhttp://aka.ms/vs/15/release/latest
- referencehttps://docs.microsoft.com/en-us/visualstudio/releasenotes/vs2017-relnotes
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.2
- referencehttps://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.11
- referencehttps://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.11
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.0
- referencehttps://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes-v17.0
- patchhttps://aka.ms/vs/12/release/5026454
- referencehttps://support.microsoft.com/help/5026454
- patchhttps://aka.ms/vs/14/release/5026455
- referencehttps://support.microsoft.com/help/5026455
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.4
- patchhttps://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.6