CVE-2023-1709

Datalogics Library APDFLThe v18.0.4PlusP1e and prior contains a stack-based buffer overflow due to documents containing corrupted fonts, which could allow an attack that causes an unhandled crash during the rendering process.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:siemens:jt2go:*:*:*:*:*:*:*:*
cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*
cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*
cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*
cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*
cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*

History

21 Nov 2024, 07:39

Type Values Removed Values Added
References () https://cert-portal.siemens.com/productcert/html/ssa-629917.html - Broken Link, Vendor Advisory () https://cert-portal.siemens.com/productcert/html/ssa-629917.html - Broken Link, Vendor Advisory
References () https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-11 - Third Party Advisory, US Government Resource () https://www.cisa.gov/news-events/ics-advisories/icsa-23-103-11 - Third Party Advisory, US Government Resource
References () https://www.cisa.gov/news-events/ics-advisories/icsa-23-164-01 - () https://www.cisa.gov/news-events/ics-advisories/icsa-23-164-01 -

Information

Published : 2023-06-07 21:15

Updated : 2024-11-21 07:39


NVD link : CVE-2023-1709

Mitre link : CVE-2023-1709

CVE.ORG link : CVE-2023-1709


JSON object : View

Products Affected

siemens

  • teamcenter_visualization
  • jt2go
CWE
CWE-121

Stack-based Buffer Overflow

CWE-787

Out-of-bounds Write