CVE-2021-44012

2021-12-1412:06:48

CWE-125

siemens

www.cve.org

jt2go

teamcenter visualization

vulnerability

information leakage

out of bounds read

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

37.0%

JSON

A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Jt1001.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted JT files. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-15102)

CNA Affected

[
  {
    "product": "JT2Go",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V13.2.0.5"
      }
    ]
  },
  {
    "product": "Teamcenter Visualization",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V13.2.0.5"
      }
    ]
  }
]