7.8

CVE-2023-7066

Siemens Teamcenter Visualization and JT2Go Out-of-bounds Read

The affected applications contain an out of bounds read past the end of 
an allocated structure while parsing specially crafted PDF files. This 
could allow an attacker to execute code in the context of the current 
process.
Daten sind bereitgestellt durch das CVE Programm von Authorized Data Publishers (ADP) (Unstrukturiert)
Herstellersiemens
Produkt jt2go
Default Statusunknown
Version 0
Version < 14.3.0.8
Status affected
Herstellersiemens
Produkt teamcenter_visualization
Default Statusunknown
Version 0
Version < 14.1.0.14
Status affected
Version 0
Version < 14.2.0.10
Status affected
Version 0
Version < 14.3.0.8
Status affected
Version 0
Version < 2312.0002
Status affected
Herstellersiemens
Produkt teamcenter_visualization
Default Statusunknown
Version 0
Version < 14.1.0.14
Status affected
Version 0
Version < 14.2.0.10
Status affected
Version 0
Version < 14.3.0.8
Status affected
Version 0
Version < 2312.0002
Status affected
Herstellersiemens
Produkt teamcenter_visualization
Default Statusunknown
Version 0
Version < 14.1.0.14
Status affected
Version 0
Version < 14.2.0.10
Status affected
Version 0
Version < 14.3.0.8
Status affected
Version 0
Version < 2312.0002
Status affected
Herstellersiemens
Produkt teamcenter_visualization
Default Statusunknown
Version 0
Version < 14.1.0.14
Status affected
Version 0
Version < 14.2.0.10
Status affected
Version 0
Version < 14.3.0.8
Status affected
Version 0
Version < 2312.0002
Status affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.24% 0.462
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
ics-cert@hq.dhs.gov 7.3 0 0
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
ics-cert@hq.dhs.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.