Lucene search
SiemensCVELIST:CVE-2020-26993HistoryJan 12, 2021 - 8:18 p.m.
CVE-2020-26993
2021-01-1220:18:35
CWE-121
siemens
www.cve.org
4
vulnerability
jt2go
teamcenter visualization
validation
user-supplied data
cgm files
buffer overflow
font index
attacker
code execution
A vulnerability has been identified in JT2Go (All versions < V13.1.0), Teamcenter Visualization (All versions < V13.1.0). Affected applications lack proper validation of user-supplied data when parsing CGM files. This could lead to a stack based buffer overflow while trying to copy to a buffer in the font index handling function. An attacker could leverage this vulnerability to execute code in the context of the current process.
CNA Affected
[
{
"product": "JT2Go",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions < V13.1.0"
}
]
},
{
"product": "Teamcenter Visualization",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions < V13.1.0"
}
]
}
]Related
prion
prion
Stack overflow
2021-01-12 21:15:00
cve
cve
CVE-2020-26993
2021-01-12 21:15:17
nvd
nvd
CVE-2020-26993
2021-01-12 21:15:17
nessus
nessus
Siemens JT2Go < 13.1.0 Multiple Vulnerabilities (SSA-622830)
2021-01-29 00:00:00
ics
ics
Siemens JT2Go and Teamcenter Visualization (Update B)
2021-05-27 12:00:00