Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hgcx-765f-h3fh

Опубликовано: 08 авг. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Teamcenter Visualization V13.2 (All versions < V13.2.0.14), Teamcenter Visualization V14.1 (All versions < V14.1.0.10), Teamcenter Visualization V14.2 (All versions < V14.2.0.5). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted TIFF file. This could allow an attacker to execute code in the context of the current process.

A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Teamcenter Visualization V13.2 (All versions < V13.2.0.14), Teamcenter Visualization V14.1 (All versions < V14.1.0.10), Teamcenter Visualization V14.2 (All versions < V14.2.0.5). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted TIFF file. This could allow an attacker to execute code in the context of the current process.

EPSS

Процентиль: 21%
0.00068
Низкий

7.8 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 7.8
nvd
больше 2 лет назад

A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Teamcenter Visualization V13.2 (All versions < V13.2.0.14), Teamcenter Visualization V14.1 (All versions < V14.1.0.10), Teamcenter Visualization V14.2 (All versions < V14.2.0.5). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted TIFF file. This could allow an attacker to execute code in the context of the current process.

CVSS3: 7.8
fstec
больше 2 лет назад

Уязвимость инструмента для просмотра 3D JT JT2Go, системы управления жизненным циклом продукции Teamcenter Visualization и набора инструментов для проектирования, связанная с возможностью записи за границами буфера в памяти, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 21%
0.00068
Низкий

7.8 High

CVSS3

Дефекты

CWE-787