Vulnerabilities > CVE-2023-1709 - Unspecified vulnerability in Siemens Jt2Go and Teamcenter Visualization
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Datalogics Library APDFLThe v18.0.4PlusP1e and prior contains a stack-based buffer overflow due to documents containing corrupted fonts, which could allow an attack that causes an unhandled crash during the rendering process.
Vulnerable Configurations
References
- https://cert-portal.siemens.com/productcert/html/ssa-629917.html
- https://cert-portal.siemens.com/productcert/html/ssa-629917.html
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-11
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-11
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-164-01
- https://www.cisa.gov/news-events/ics-advisories/icsa-23-164-01