Skip to content
OpenAdvisories
High SSA-629917 1 CVE

SSA-629917: Datalogics File Parsing Vulnerability in Teamcenter Visualization and JT2Go

Published Apr 11, 2023 · Updated Apr 11, 2023

Vendor: Siemens Product: JT2Go Product: Teamcenter Visualization V13.2 Product: Teamcenter Visualization V13.3 Product: Teamcenter Visualization V14.0 Product: Teamcenter Visualization V14.1 Product: Teamcenter Visualization V14.2

Summary

Siemens Teamcenter Visualization and JT2Go are affected by a memory corruption vulnerability in the APDFL library from Datalogics. If a user is tricked to open a malicious PDF file with the affected products, this could lead the application to crash or potentially lead to arbitrary code execution.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

  • Medium 5.5
    CVE-2023-1709

    Datalogics Library APDFL Stack-based Buffer Overflow

    Datalogics Library APDFLThe v18.0.4PlusP1e and prior contains a stack-based buffer overflow due to documents containing corrupted fonts, which could allow an attack that causes an unhandled crash during the rendering process.

    Siemens datalogics JT2Go Teamcenter Visualization ICS / OT

Revision history

  1. #1

    Publication date

References