High · 7.8 CVE-2022-3161 EUVD-2022-42585GHSA-h7rr-pq87-v2r8

The APDFL.dll contains a memory corruption vulnerability while parsing specially crafted PDF files. This could allow an attacker to execute…

Published Jan 13, 2023 · Updated Jan 16, 2025 · Assigned by icscert

Vendor: Siemens Product: JT2Go Product: Teamcenter Visualization V13.3 Product: Teamcenter Visualization V14.0 Product: Teamcenter Visualization V14.1 Category: ICS / OT

Description

The APDFL.dll contains a memory corruption vulnerability while parsing
specially crafted PDF files. This could allow an attacker to execute
code in the context of the current process.

Affected products

Vendor	Product	Affected	Fixed
Siemens	JT2Go	< 14.1.0.5	14.1.0.5
Siemens	Teamcenter Visualization V13.3	< 13.3.0.8	13.3.0.8
Siemens	Teamcenter Visualization V14.0	< 14.0.0.4	14.0.0.4
Siemens	Teamcenter Visualization V14.1	< 14.1.0.5	14.1.0.5

Advisories 3

ICSA-22-349-15 Siemens Teamcenter Visualization and JT2Go CISA ICS & IT advisories · Dec 13, 2022
SSA-360681 SSA-360681: Datalogics File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go Siemens ProductCERT · Dec 13, 2022
WID-SEC-2022-2296 Siemens JT2Go: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 12, 2022

References