A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected applications lacks proper validation of user-supplied data when parsing BMP files. A malformed input file could result in double free of an allocated buffer that leads to a crash. An attacker could leverage this vulnerability to cause denial of service condition. (CNVD-C-2021-79295)
References
| Link | Resource |
|---|---|
| https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
15 Jul 2021, 18:08
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:siemens:jt2go:*:*:*:*:*:*:*:* cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:* |
|
| References | (CONFIRM) https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : 4.3
v3 : 5.5 |
13 Jul 2021, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected applications lacks proper validation of user-supplied data when parsing BMP files. A malformed input file could result in double free of an allocated buffer that leads to a crash. An attacker could leverage this vulnerability to cause denial of service condition. (CNVD-C-2021-79295) | |
| CWE | CWE-415 |
13 Jul 2021, 11:30
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-07-13 11:15
Updated : 2023-12-10 13:55
NVD link : CVE-2021-34333
Mitre link : CVE-2021-34333
CVE.ORG link : CVE-2021-34333
JSON object : View
Products Affected
siemens
- jt2go
- teamcenter_visualization
CWE
CWE-415
Double Free