
CVE-2021-44011 – Siemens JT2Go JT File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2021-44011
14 Dec 2021 — A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Jt1001.dll is vulnerable to an out of bounds read past the end of an allocated buffer while parsing specially crafted JT files. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-15101) Se ha identificado una vulnerabilidad en JT2Go (Todas las versiones anteriores a V13.2.0.5), Teamcenter Visualization (Todas las vers... • https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf • CWE-125: Out-of-bounds Read •

CVE-2021-44009
https://notcve.org/view.php?id=CVE-2021-44009
14 Dec 2021 — A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing TIFF files. An attacker could leverage this vulnerability to leak information in the context of the current process. Se ha identificado una vulnerabilidad en JT2Go (Todas las versiones anteriores a V13.2.0.5), Teamcenter Visualization (Todas las versiones anteriores a V13.2.0.5... • https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf • CWE-125: Out-of-bounds Read •

CVE-2021-44010
https://notcve.org/view.php?id=CVE-2021-44010
14 Dec 2021 — A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing TIFF files. An attacker could leverage this vulnerability to leak information in the context of the current process. Se ha identificado una vulnerabilidad en JT2Go (Todas las versiones anteriores a V13.2.0.5), Teamcenter Visualization (Todas las versiones anteriores a V13.2.0.5... • https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf • CWE-125: Out-of-bounds Read •

CVE-2021-44008
https://notcve.org/view.php?id=CVE-2021-44008
14 Dec 2021 — A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing TIFF files. An attacker could leverage this vulnerability to leak information in the context of the current process. Se ha identificado una vulnerabilidad en JT2Go (Todas las versiones anteriores a V13.2.0.5), Teamcenter Visualization (Todas las versiones anteriores a V13.2.0.5... • https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf • CWE-125: Out-of-bounds Read •

CVE-2021-44007
https://notcve.org/view.php?id=CVE-2021-44007
14 Dec 2021 — A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll contains an off-by-one error in the heap while parsing specially crafted TIFF files. This could allow an attacker to cause a denial-of-service condition. Se ha identificado una vulnerabilidad en JT2Go (Todas las versiones anteriores a V13.2.0.5), Teamcenter Visualization (Todas las versiones anteriores a V13.2.0.5). El archivo Tiff_Loader.dll contiene un error en ... • https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf • CWE-193: Off-by-one Error •

CVE-2021-44005
https://notcve.org/view.php?id=CVE-2021-44005
14 Dec 2021 — A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted TIFF files. This could allow an attacker to execute code in the context of the current process. Se ha identificado una vulnerabilidad en JT2Go (Todas las versiones anteriores a V13.2.0.5), Teamcenter Visualization (Todas las versiones anteriores a V13.2.0.5). El ... • https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf • CWE-787: Out-of-bounds Write •

CVE-2021-44006
https://notcve.org/view.php?id=CVE-2021-44006
14 Dec 2021 — A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted TIFF files. This could allow an attacker to execute code in the context of the current process. Se ha identificado una vulnerabilidad en JT2Go (Todas las versiones anteriores a V13.2.0.5), Teamcenter Visualization (Todas las versiones anteriores a V13.2.0.5). El ... • https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf • CWE-787: Out-of-bounds Write •

CVE-2021-44004
https://notcve.org/view.php?id=CVE-2021-44004
14 Dec 2021 — A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing TIFF files. An attacker could leverage this vulnerability to leak information in the context of the current process. Se ha identificado una vulnerabilidad en JT2Go (Todas las versiones anteriores a V13.2.0.5), Teamcenter Visualization (Todas las versiones anteriores a V13.2.0.5... • https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf • CWE-125: Out-of-bounds Read •

CVE-2021-44003
https://notcve.org/view.php?id=CVE-2021-44003
14 Dec 2021 — A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The Tiff_Loader.dll is vulnerable to use of uninitialized memory while parsing user supplied TIFF files. This could allow an attacker to cause a denial-of-service condition. Se ha identificado una vulnerabilidad en JT2Go (Todas las versiones anteriores a V13.2.0.5), Teamcenter Visualization (Todas las versiones anteriores a V13.2.0.5). El archivo Tiff_Loader.dll es vulnerable al uso ... • https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf • CWE-457: Use of Uninitialized Variable CWE-908: Use of Uninitialized Resource •

CVE-2021-44002 – Siemens Solid Edge Viewer JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2021-44002
14 Dec 2021 — A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Solid Edge (All versions < V2023). The Jt1001.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15058, ZDI-CAN-19076, ZDI-CAN-19077) Se ha identificado una vulnerabilidad en JT2Go (Todas las versiones anteriores a V13.2.0.5), Teamcenter... • https://cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf • CWE-787: Out-of-bounds Write •