Stack-based overflow in Teamcenter Visualization XML parser (<V14.2.0.13)
CVE-2024-37997 Published on July 9, 2024
A vulnerability has been identified in JT Open (All versions < V11.5), JT2Go (All versions < V2406.0003), PLM XML SDK (All versions < V7.1.0.014), Teamcenter Visualization V14.2 (All versions < V14.2.0.13), Teamcenter Visualization V14.3 (All versions < V14.3.0.11), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All versions < V2406.0003). The affected applications contain a stack based overflow vulnerability while parsing specially crafted XML files. This could allow an attacker to execute code in the context of the current process.
Vulnerability Analysis
Weakness Type
What is a Stack Overflow Vulnerability?
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
CVE-2024-37997 has been classified to as a Stack Overflow vulnerability or weakness.
Products Associated with CVE-2024-37997
stack.watch emails you whenever new vulnerabilities are published in Siemens Teamcenter Visualization or Oracle. Just hit a watch button to start following.
