CVE-2022-3161: The APDFL.dll contains a memory corruption vulnerability while parsing specially crafted PDF files. This could allow an attacker to execute code in the context…

high7.8CVSS 3.1

AVLACLPRNUIRSUCHIHAH

The APDFL.dll contains a memory corruption vulnerability while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
siemens	jt2go	< 14.1.0.5	14.1.0.5
siemens	teamcenter_visualization	>= 13.3.0 < 13.3.0.8	13.3.0.8
siemens	teamcenter_visualization	>= 14.0 < 14.0.0.4	14.0.0.4
siemens	teamcenter_visualization	>= 14.1 < 14.1.0.5	14.1.0.5
siemens	teamcenter_visualization_v13.3	< 13.3.0.8	13.3.0.8
siemens	teamcenter_visualization_v14.0	< 14.0.0.4	14.0.0.4
siemens	teamcenter_visualization_v14.1	< 14.1.0.5	14.1.0.5

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

cisa9.8CRITICAL