CVE-2022-29028

published 2022-05-20

CVE-2022-29028: A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization…

medium 5.5 CVSS 3.1

AV L AC L PR N UI R S U C N I N A H

A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V14.0 (All versions < V14.0.0.1). The Tiff_Loader.dll is vulnerable to infinite loop condition while parsing specially crafted TIFF files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
siemens	jt2go	< 13.3.0.3	13.3.0.3
siemens	jt2go	—	—
siemens	teamcenter_visualization	>= 13.3 < 13.3.0.3	13.3.0.3
siemens	teamcenter_visualization	>= 14.0 < 14.0.0.1	14.0.0.1
siemens	teamcenter_visualization_v13.3	—	—
siemens	teamcenter_visualization_v14.0	—	—

CWE-835