SSA-360681: Datalogics File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go
Siemens Teamcenter Visualization and JT2Go are affected by multiple out of bounds write vulnerabilities in the APDFL library from Datalogics. If a user is tricked to open a malicious PDF file with the affected products, this could lead the application to crash or potentially lead to arbitrary code execution. Siemens has released updates for the affected products and recommends to update to the latest versions.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-3161US | high7.8 | — | ||
The APDFL.dll contains a memory corruption vulnerability while parsing
specially crafted PDF files. This could allow an attacker to execute
code in the context of the current p… | ||||
| CVE-2022-3160US | high7.8 | — | ||
The APDFL.dll contains an out-of-bounds write past the fixed-length
heap-based buffer while parsing specially crafted PDF files. This could
allow an attacker to execute code in… | ||||
| CVE-2022-3159US | high7.8 | — | ||
The APDFL.dll contains a stack-based buffer overflow vulnerability that
could be triggered while parsing specially crafted PDF files. This could
allow an attacker to execute code… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-360681: Datalogics File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go - CSAF Versionself
- SSA-360681: Datalogics File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go - PDF Versionself
- SSA-360681: Datalogics File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go - TXT Versionself
Behebungen (24)
- MitigationJT2Go
Do not open untrusted PDF files in JT2Go and Teamcenter Visualization
- MitigationJT2Go
Do not open untrusted PDF files in JT2Go and Teamcenter Visualization
- MitigationJT2Go
Do not open untrusted PDF files in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V13.3
Do not open untrusted PDF files in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V13.3
Do not open untrusted PDF files in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V13.3
Do not open untrusted PDF files in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V14.0
Do not open untrusted PDF files in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V14.0
Do not open untrusted PDF files in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V14.0
Do not open untrusted PDF files in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V14.1
Do not open untrusted PDF files in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V14.1
Do not open untrusted PDF files in JT2Go and Teamcenter Visualization
- MitigationTeamcenter Visualization V14.1
Do not open untrusted PDF files in JT2Go and Teamcenter Visualization
- BehobenJT2Go
Update to V14.1.0.5 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - BehobenJT2Go
Update to V14.1.0.5 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - BehobenJT2Go
Update to V14.1.0.5 or later version
https://www.plm.automation.siemens.com/global/en/products/plm-components/jt2go.html - BehobenTeamcenter Visualization V13.3
Update to V13.3.0.8 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V13.3
Update to V13.3.0.8 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V13.3
Update to V13.3.0.8 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.0
Update to V14.0.0.4 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.0
Update to V14.0.0.4 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.0
Update to V14.0.0.4 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.1
Update to V14.1.0.5 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.1
Update to V14.1.0.5 or later version
https://support.sw.siemens.com/ - BehobenTeamcenter Visualization V14.1
Update to V14.1.0.5 or later version
https://support.sw.siemens.com/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan