Datalogics APDFL v18.0.4PlusP1e Buffer Overflow in Font Rendering
CVE-2023-1709 Published on June 7, 2023

Datalogics Library APDFL Stack-based Buffer Overflow
Datalogics Library APDFLThe v18.0.4PlusP1e and prior contains a stack-based buffer overflow due to documents containing corrupted fonts, which could allow an attack that causes an unhandled crash during the rendering process.

NVD

Vulnerability Analysis

CVE-2023-1709 can be exploited with local system access, requires user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Exploitation:

NONE

Automatable:

NO

Technical Impact:

TOTAL

Attack Vector:

LOCAL

Attack Complexity:

LOW

Privileges Required:

NONE

User Interaction:

REQUIRED

Scope:

UNCHANGED

Confidentiality Impact:

HIGH

Integrity Impact:

HIGH

Availability Impact:

HIGH

Weakness Type

What is a Stack Overflow Vulnerability?

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

CVE-2023-1709 has been classified to as a Stack Overflow vulnerability or weakness.

Products Associated with CVE-2023-1709

stack.watch emails you whenever new vulnerabilities are published in Siemens Jt2go or Siemens Teamcenter Visualization. Just hit a watch button to start following.

Siemens Jt2go

  Watch

Siemens Teamcenter Visualization

  Watch

Affected Versions

• Before 14.2.0.2 is affected.

• Version 13.2 and below 13.2.0.13 is affected.
• Version 13.3 and below 13.3.0.9 is affected.
• Version 14.0 and below 14.0.0.5 is affected.
• Version 14.1 and below 14.1.0.7 is affected.
• Version 14.2 and below 14.2.0.2 is affected.

• Before and including v18.0.4PlusP1e is affected.

Exploit Probability