SSA-802578: Multiple File Parsing Vulnerabilities in JTTK before V11.1.1.0 and JT Utilities before V13.1.1.0
JT Open Toolkit (JTTK) before V11.1.1.0 contains multiple vulnerabilities that could be triggered when it reads a maliciously crafted JT file. These vulnerabilities also affects JT Utilities before V13.1.1.0. If a user is tricked to open a malicious JT file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens recommends to update to the latest versions and to limit opening of untrusted files from unknown sources in the affected products.
describes (16)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-44445US | high7.8 | — | ||
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products contains an out of bounds write p… | ||||
| CVE-2021-44444US | low3.3 | — | ||
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds… | ||||
| CVE-2021-44443US | high7.8 | — | ||
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products contains an out of bounds write p… | ||||
| CVE-2021-44442US | high7.8 | — | ||
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products contains an out of bounds write p… | ||||
| CVE-2021-44441US | high7.8 | — | ||
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products contains an out of bounds write p… | ||||
| CVE-2021-44440US | high7.8 | — | ||
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to memory corruptio… | ||||
| CVE-2021-44439US | high7.8 | — | ||
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds… | ||||
| CVE-2021-44438US | high7.8 | — | ||
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds… | ||||
| CVE-2021-44437US | high7.8 | — | ||
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds… | ||||
| CVE-2021-44436US | low3.3 | — | ||
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds… | ||||
| CVE-2021-44435US | high7.8 | — | ||
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to stack based buff… | ||||
| CVE-2021-44434US | high7.8 | — | ||
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds… | ||||
| CVE-2021-44433US | high7.8 | — | ||
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products contains a use after free vulnera… | ||||
| CVE-2021-44432US | high7.8 | — | ||
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to stack based buff… | ||||
| CVE-2021-44431US | low3.3 | — | ||
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds… | ||||
| CVE-2021-44430US | high7.8 | — | ||
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds… | ||||
references
External citations — patches, advisories, analysis.
- SSA-802578: Multiple File Parsing Vulnerabilities in JTTK before V11.1.1.0 and JT Utilities before V13.1.1.0 - CSAF Versionself
- SSA-802578: Multiple File Parsing Vulnerabilities in JTTK before V11.1.1.0 and JT Utilities before V13.1.1.0 - PDF Versionself
- SSA-802578: Multiple File Parsing Vulnerabilities in JTTK before V11.1.1.0 and JT Utilities before V13.1.1.0 - TXT Versionself
remediations (64)
- MitigationJT Utilities
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJT Utilities
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJT Utilities
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJT Utilities
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJT Utilities
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJT Utilities
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJT Utilities
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJT Utilities
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJT Utilities
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJT Utilities
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJT Utilities
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJT Utilities
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJT Utilities
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJT Utilities
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJT Utilities
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJT Utilities
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJTTK
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJTTK
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJTTK
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJTTK
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJTTK
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJTTK
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJTTK
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJTTK
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJTTK
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJTTK
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJTTK
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJTTK
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJTTK
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJTTK
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJTTK
Avoid opening untrusted files from unknown sources in JT Utilities
- MitigationJTTK
Avoid opening untrusted files from unknown sources in JT Utilities
- FixedJT Utilities
Update to V13.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJT Utilities
Update to V13.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJT Utilities
Update to V13.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJT Utilities
Update to V13.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJT Utilities
Update to V13.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJT Utilities
Update to V13.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJT Utilities
Update to V13.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJT Utilities
Update to V13.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJT Utilities
Update to V13.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJT Utilities
Update to V13.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJT Utilities
Update to V13.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJT Utilities
Update to V13.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJT Utilities
Update to V13.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJT Utilities
Update to V13.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJT Utilities
Update to V13.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJT Utilities
Update to V13.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJTTK
Update to V11.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJTTK
Update to V11.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJTTK
Update to V11.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJTTK
Update to V11.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJTTK
Update to V11.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJTTK
Update to V11.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJTTK
Update to V11.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJTTK
Update to V11.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJTTK
Update to V11.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJTTK
Update to V11.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJTTK
Update to V11.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJTTK
Update to V11.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJTTK
Update to V11.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJTTK
Update to V11.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJTTK
Update to V11.1.1.0 or later version
https://support.sw.siemens.com/ - FixedJTTK
Update to V11.1.1.0 or later version
https://support.sw.siemens.com/
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan