Siemens JT2Go & Teamcenter Visualization <v13.3.0.5/v14.0.0.2> APDFL.dll OOB Write
CVE-2022-2069 Published on October 20, 2022
Datalogics APDFL library Heap-based Buffer Overflow
The APDFL.dll in Siemens JT2Go prior to V13.3.0.5 and Siemens Teamcenter Visualization prior to V14.0.0.2 contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process.
Vulnerability Analysis
CVE-2022-2069 can be exploited with local system access, requires user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Weakness Type
Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
Products Associated with CVE-2022-2069
stack.watch emails you whenever new vulnerabilities are published in Siemens Teamcenter Visualization or Siemens Jt2go. Just hit a watch button to start following.
