Description
The affected applications contain an out of bounds read past the end of
an allocated structure while parsing specially crafted PDF files. This
could allow an attacker to execute code in the context of the current
process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | JT2Go | < V14.3.0.8 | V14.3.0.8 |
| Siemens | Teamcenter Visualization | < V14.1.0.14, < V14.2.0.10, < V14.3.0.8, < V2312.0002 | V14.1.0.14 |
Advisories 4
- ICSA-24-193-03 Siemens Teamcenter Visualization and JT2Go CISA ICS & IT advisories · Aug 13, 2024
- SSA-722010 SSA-722010: Datalogics File Parsing Vulnerability in Teamcenter Visualization and JT2Go Siemens ProductCERT · Aug 13, 2024
- WID-SEC-2024-1575 Siemens JT2Go: Schwachstelle ermöglicht Codeausführung und DoS BSI CERT-Bund (WID) · Jul 9, 2024
- NCSC-2024-0282 Kwetsbaarheden verholpen in Siemens Producten NCSC-NL (Netherlands) · Jul 9, 2024