SSA-396621: Multiple File Parsing Vulnerabilities in JTTK before V10.8.1.1 and JT Utilities before V12.8.1.1
JT Open Toolkit (JTTK) before V10.8.1.1 contains multiple vulnerabilities that could be triggered when it reads a maliciously crafted JT file. These vulnerabilities also affects JT Utilities before V12.8.1.1. If a user is tricked to open a malicious file with any of the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens recommends to update to the latest versions and to limit opening of untrusted files from unknown sources in the affected products.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-44450US | high7.8 | — | ||
A vulnerability has been identified in JT Utilities (All versions < V12.8.1.1), JTTK (All versions < V10.8.1.1). JTTK library in affected products is vulnerable to an out of bounds… | ||||
| CVE-2021-44449US | high7.8 | — | ||
A vulnerability has been identified in JT Utilities (All versions < V12.8.1.1), JTTK (All versions < V10.8.1.1). JTTK library in affected products contains an out of bounds write p… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-396621: Multiple File Parsing Vulnerabilities in JTTK before V10.8.1.1 and JT Utilities before V12.8.1.1 - CSAF Versionself
- SSA-396621: Multiple File Parsing Vulnerabilities in JTTK before V10.8.1.1 and JT Utilities before V12.8.1.1 - PDF Versionself
- SSA-396621: Multiple File Parsing Vulnerabilities in JTTK before V10.8.1.1 and JT Utilities before V12.8.1.1 - TXT Versionself
Behebungen (8)
- MitigationJT Utilities
Avoid to open untrusted files from unknown sources using JT Utilities
- MitigationJT Utilities
Avoid to open untrusted files from unknown sources using JT Utilities
- MitigationJTTK
Avoid to open untrusted files from unknown sources using JT Utilities
- MitigationJTTK
Avoid to open untrusted files from unknown sources using JT Utilities
- BehobenJT Utilities
Update to V12.8.1.1 or later version
https://support.sw.siemens.com/ - BehobenJT Utilities
Update to V12.8.1.1 or later version
https://support.sw.siemens.com/ - BehobenJTTK
Update to V10.8.1.1 or later version
https://support.sw.siemens.com/ - BehobenJTTK
Update to V10.8.1.1 or later version
https://support.sw.siemens.com/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan