Description (CNA)
The Datalogics APDFL library used in affected products is vulnerable to memory corruption condition while parsing specially crafted PDF files. An attacker could leverage this vulnerability to execute code in the context of the current process.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Siemens / JT2Go | affected 0 before 13.2.0.7 |
| Siemens / Teamcenter Visualization | affected 12.4 before 12.4.0.13; affected 13.1 before 13.1.0.8; affected 13.2 before 13.2.0.7; affected 13.3 before 13.3.0.1 |
CWE
CWE-119
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-301589.pdf
- https://www.cisa.gov/news-events/ics-advisories/icsa-22-041-07
ADP enrichment
No English description supplied.