Description
The APDFL.dll in Siemens JT2Go prior to V13.3.0.5 and Siemens Teamcenter Visualization prior to V14.0.0.2 contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | JT2Go | unspecified – < V13.3.0.5 | V13.3.0.5 |
| Siemens | Teamcenter Visualization V13.3 | unspecified – < V13.3.0.5 | V13.3.0.5 |
| Siemens | Teamcenter Visualization V14.0 | unspecified – < V14.0.0.2 | V14.0.0.2 |
Advisories 2
- ICSA-22-195-07 Siemens Datalogics File Parsing Vulnerability CISA ICS & IT advisories · Aug 9, 2022
- SSA-829738 SSA-829738: Datalogics File Parsing Vulnerability in Teamcenter Visualization and JT2Go Siemens ProductCERT · Aug 9, 2022