Siemens JT2Go
Siemens JT2Go is affected by a stack-based buffer overflow vulnerability that could be triggered when the application reads files in PDF format. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released a new version for JT2Go and recommends to update to the latest version.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-41902US | high7.8 | — | ||
A vulnerability has been identified in JT2Go (All versions < V2406.0003). The affected application contains a stack-based buffer overflow vulnerability that could be triggered whil… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-626178: Stack-Based Buffer Overflow Vulnerability in JT2Go Before V2406.0003 - CSAF Versionself
- SSA-626178: Stack-Based Buffer Overflow Vulnerability in JT2Go Before V2406.0003 - HTML Versionself
- ICS Advisory ICSA-24-284-07 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-24-284-07 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
Behebungen (2)
- MitigationJT2Go
Do not open untrusted PDF files in affected applications
- BehobenJT2Go
Update to V2406.0003 or later version
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan