CVEvulnerability
CVE-2022-3159
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-01-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-121, CWE-787
Description
The APDFL.dll contains a stack-based buffer overflow vulnerability that
could be triggered while parsing specially crafted PDF files. This could
allow an attacker to execute code in the context of the current
process.
Affected configurations
• siemens jt2go (< 14.1.0.5)
• siemens teamcenter visualization (>= 13.3.0 < 13.3.0.8)
• siemens teamcenter visualization (>= 14.0.0 < 14.0.0.4)
• siemens teamcenter visualization (>= 14.1 < 14.1.0.5)
Related
References
- https://cert-portal.siemens.com/productcert/csaf/ssa-360681.json Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-360681.html Patch, Third Party Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-349-15 Third Party Advisory, US Government Resource
- https://cert-portal.siemens.com/productcert/csaf/ssa-360681.json Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-360681.html Patch, Third Party Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsa-22-349-15 Third Party Advisory, US Government Resource