CVE-2021-44007

published 2021-12-14

CVE-2021-44007: A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll contains an…

medium 5.5 CVSS 3.1

AV L AC L PR N UI R S U C N I N A H

A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll contains an off-by-one error in the heap while parsing specially crafted TIFF files. This could allow an attacker to cause a denial-of-service condition.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
siemens	jt2go	< 13.2.0.5	13.2.0.5
siemens	jt2go	—	—
siemens	teamcenter_visualization	< 13.2.0.5	13.2.0.5
siemens	teamcenter_visualization	—	—

CWE-193