CVE-2021-44002
Assigner: siemens
Published: 2021-12-14T12:06:41
State: PUBLISHED
descriptions: value: A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Solid Edge (All versions < V2023). The Jt1001.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-15058, ZDI-CAN-19076, ZDI-CAN-19077)
affected: vendor: Siemens
product: JT Open
versions: version: All versions < V11.1.1.0
status: affected
defaultStatus: unknown
vendor: Siemens
product: JT Utilities
versions: version: All versions < V13.1.1.0
status: affected
defaultStatus: unknown
vendor: Siemens
product: Solid Edge
versions: version: All versions < V2023
status: affected
defaultStatus: unknown
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
baseScore: 7.8
baseSeverity: HIGH
problemTypes: descriptions: cweId: CWE-787
description: CWE-787: Out-of-bounds Write
type: CWE