CVE-2021-34292 — Vulnetix

CVE-2021-34292 PUBLISHED CVSS 7.800000190734863 HIGH

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The Tiff_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could result in an out of bounds read past the end of an allocated buffer. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12959)

EPSS 0.42% · 62.1th percentile

Risk Scores

CVSS v3.1

7.800000190734863

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

0.42%

62.1th percentile

Affected Products

Vendor	Product	Versions
siemens	jt2go	0
siemens	teamcenter_visualization	0
Siemens	Teamcenter Visualization	All versions < V13.2
Siemens	JT2Go	All versions < V13.2

Timeline

Jul 13, 2021 CVE Published
Jul 14, 2021 EPSS Score
Sep 12, 2021 EPSS Score
Nov 10, 2021 EPSS Score
Jan 6, 2022 EPSS Score
Feb 4, 2022 EPSS Score
Mar 9, 2022 EPSS Score
Apr 1, 2022 EPSS Score
May 8, 2022 EPSS Score
Jul 7, 2022 EPSS Score
Sep 5, 2022 EPSS Score
Nov 4, 2022 EPSS Score

References

Open in Interactive Console →