Siemens Jt2go and Siemens Teamcenter Visualization Remote Code Execution Vulnerability

Siemens Jt2go and Siemens Teamcenter Visualization are both products of Siemens AG, Germany. Siemens Jt2go is a JT file viewer. A remote code execution vulnerability exists in Siemens JT2Go versions prior to 13.2 and Teamcenter Visualization versions prior to 13.2, which stems from a failure of the BMP_Loader.dll library to properly validate user-supplied data before performing further release operations on objects when parsing BMP files. An attacker could use this vulnerability to execute code in the context of the current process.