Description
The Datalogics APDFL library used in affected products is vulnerable to memory corruption condition while parsing specially crafted PDF files. An attacker could leverage this vulnerability to execute code in the context of the current process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | JT2Go | < 13.2.0.7 | 13.2.0.7 |
| Siemens | Teamcenter Visualization | 12.4 – < 12.4.0.13, 13.1 – < 13.1.0.8, 13.2 – < 13.2.0.7, 13.3 – < 13.3.0.1 | 12.4.0.13 |
Advisories 2
- ICSA-22-041-07 Siemens Solid Edge, JT2Go, and Teamcenter Visualization CISA ICS & IT advisories · Jun 14, 2022
- SSA-301589 SSA-301589: Multiple File Parsing Vulnerabilities in Solid Edge, JT2Go and Teamcenter Visualization Siemens ProductCERT · Jun 14, 2022