Lucene search

K
cvelistSiemensCVELIST:CVE-2022-29028
HistoryMay 10, 2022 - 9:47 a.m.

CVE-2022-29028

2022-05-1009:47:05
CWE-835
siemens
www.cve.org
5
cve-2022-29028
infinite loop
tiff files
denial of service

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

19.8%

A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V14.0 (All versions < V14.0.0.1). The Tiff_Loader.dll is vulnerable to infinite loop condition while parsing specially crafted TIFF files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.

CNA Affected

[
  {
    "product": "JT2Go",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V13.3.0.3"
      }
    ]
  },
  {
    "product": "Teamcenter Visualization V13.3",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V13.3.0.3"
      }
    ]
  },
  {
    "product": "Teamcenter Visualization V14.0",
    "vendor": "Siemens",
    "versions": [
      {
        "status": "affected",
        "version": "All versions < V14.0.0.1"
      }
    ]
  }
]

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

19.8%

Related for CVELIST:CVE-2022-29028