Vulnerabilities > CVE-2021-44007 - Off-by-one Error vulnerability in Siemens Jt2Go and Teamcenter Visualization

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
siemens
CWE-193
NVD
Published: 2021-12-14
Updated: 2021-12-15

Summary

A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll contains an off-by-one error in the heap while parsing specially crafted TIFF files. This could allow an attacker to cause a denial-of-service condition.

Vulnerable Configurations

Part Description Count
Application
Siemens
15

Common Weakness Enumeration (CWE)

References