Description
A vulnerability has been identified in JT2Go (All versions < V2406.0003). The affected application contains a stack-based buffer overflow vulnerability that could be triggered while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | JT2Go | < V2406.0003 | V2406.0003 |
Advisories 4
- ICSA-24-284-07 Siemens JT2Go CISA ICS & IT advisories · May 6, 2025
- NCSC-2024-0390 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Oct 8, 2024
- SSA-626178 SSA-626178: Stack-Based Buffer Overflow Vulnerability in JT2Go Before V2406.0003 Siemens ProductCERT · Oct 8, 2024
- WID-SEC-2024-3098 Siemens JT2Go: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 7, 2024