7.8

CVE-2023-1709

Datalogics Library APDFLThe v18.0.4PlusP1e and prior contains a stack-based buffer overflow due to documents containing corrupted fonts, which could allow an attack that causes an unhandled crash during the rendering process.

Data is provided by the National Vulnerability Database (NVD)
Siemens ≫ Jt2go Version < 14.2.0.2
Siemens ≫ Teamcenter Visualization Version >= 13.2.0 < 13.2.0.13
Siemens ≫ Teamcenter Visualization Version >= 13.3.0 < 13.3.0.9
Siemens ≫ Teamcenter Visualization Version >= 14.0 < 14.0.0.5
Siemens ≫ Teamcenter Visualization Version >= 14.1 < 14.1.0.7
Siemens ≫ Teamcenter Visualization Version >= 14.2 < 14.2.0.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.1% 0.245
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
ics-cert@hq.dhs.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-11
Third Party Advisory
US Government Resource