Autodesk Design Review 2018 Hotfix-4

Autodesk Support

Oct 1, 2021

Thank you for downloading the Autodesk® Design Review 2018 Hotfix 4. We strongly recommend that you read this document in its entirety before applying the Hotfix to your product.

Affected Products

The issues addressed by this hotfix affect Autodesk Design Review 2018, Autodesk Design Review 2013, Autodesk Design Review 2012, and Autodesk Design Review 2011.

Issues Resolved by this Hotfix

This hotfix addresses the following security vulnerabilities:

  • Where, upon visiting a malicious page or opening a malicious file, a remote attacker could force Design Review to write outside the bounds of the allocated structure. An attacker could then execute arbitrary code when Design Review processes PCX, PICT, RLC, or TIFF files.
  • Where, upon visiting a malicious page or opening a malicious file, a remote attacker could execute arbitrary code when Design Review parses TIF, DWF, TGA, PNG, PCX, or PICT files.
  • Where opening a maliciously crafted PCX or RLC file can cause Design Review to write beyond the bounds of the allocated structure. An attacker could use this flaw to execute arbitrary code.

Installation and Execution Instructions

For users of Autodesk Design Review 2018:

  1. Download ADR2018SP4.msp from this page.
  2. In Windows Explorer, right-click ADR2018SP4.msp and select Run as Administrator.

For users of Autodesk Design Review 2013 or earlier:

  1. Uninstall Autodesk Design Review.
  2. Download and install Autodesk Design Review 2018.
  3. Download ADR2018SP4.msp from this page.
  4. In Windows Explorer, right-click ADR2018SP4.msp and select Run as Administrator.

Installation Verification Instructions

  1. Navigate to the folder Autodesk Design Review has been installed to (C:\Program Files \x86\Autodesk\Autodesk Design Review by default).
  2. Right-click DesignReview.exe and select Properties.
  3. Inspect the Details tab.
  4. Verify that the version is 14.0.4.198.

Note: Autodesk encourages you to use the Autodesk Viewer to view and share 2D and 3D design files over the web. The Autodesk Viewer can handle more than 70 different design file formats.

ADR2018SP4.msp (msi - 70.8MB)

Note: when downloading the MSP file, please right-click on the link and select Save Link as from the popup menu.


Was this information helpful?

Need help? Ask the Autodesk Assistant!

The Assistant can help you find answers or contact an agent.

Ask the Assistant

What level of support do you have?

Different subscription plans provide distinct categories of support. Find out the level of support for your plan.

View levels of support