Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-3159

The APDFL.dll contains a stack-based buffer overflow vulnerability that could be triggered while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process.

Published

2023-01-13T01:15:09.600

Last Modified

2024-11-21T07:18:57.053

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses

Type: Secondary
CWE-121
Type: Primary
CWE-787

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	siemens	jt2go	< 14.1.0.5	Yes
Application	siemens	teamcenter_visualization	< 13.3.0.8	Yes
Application	siemens	teamcenter_visualization	< 14.0.0.4	Yes
Application	siemens	teamcenter_visualization	< 14.1.0.5	Yes

References

https://cert-portal.siemens.com/productcert/csaf/ssa-360681.json Third Party Advisory ([email protected])
https://cert-portal.siemens.com/productcert/html/ssa-360681.html Patch, Third Party Advisory ([email protected])
https://www.cisa.gov/uscert/ics/advisories/icsa-22-349-15 Third Party Advisory, US Government Resource ([email protected])
https://cert-portal.siemens.com/productcert/csaf/ssa-360681.json Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://cert-portal.siemens.com/productcert/html/ssa-360681.html Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.cisa.gov/uscert/ics/advisories/icsa-22-349-15 Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)