CVE-2019-7361 - CVE House
Back to Database
Status published High CVE-2019-7361

An attacker may convince a victim to open a malicious...

Vulnerability Description

An attacker may convince a victim to open a malicious action micro (.actm) file that has serialized data, which may trigger a code execution in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018, Autodesk AutoCAD P&ID 2018, Autodesk AutoCAD Plant 3D 2018, Autodesk AutoCAD LT 2018, and Autodesk Civil 3D 2018.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-7361

Credits & Attribution

No credits recorded in the NVD database.

References

More from Autodesk

View All →
CVE-2025-9460
SLDPRT File Parsing Out-of-Bounds Read Vulnerability
High 7.8
CVE-2025-9459
SLDPRT File Parsing Out-of-Bounds Read Vulnerability
High 7.8
CVE-2025-9458
PRT File Parsing Memory Corruption Vulnerability
High 7.8
CVE-2025-9457
PRT File Parsing Memory Corruption Vulnerability
High 7.8
CVE-2025-9456
SLDPRT File Parsing Memory Corruption Vulnerability
High 7.8

Affected Vendor

Affected Software

Autodesk Civil 3D, Autodesk Advance Steel, Autodesk AutoCAD, Autodesk AutoCAD Architecture, Autodesk AutoCAD Electrical, Autodesk AutoCAD Map 3D, Autodesk AutoCAD Mechanical, Autodesk AutoCAD MEP, Autodesk AutoCAD P&ID, Autodesk AutoCAD Plant 3D, Autodesk AutoCAD LT
Vulnerable Versions:
2018

Timeline

Official Publish: April 9th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.