First published: Tue May 10 2022(Updated: )
A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V14.0 (All versions < V14.0.0.1). The Tiff_Loader.dll is vulnerable to infinite loop condition while parsing specially crafted TIFF files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.
Credit: productcert@siemens.com
Affected Software | Affected Version | How to fix |
---|---|---|
Siemens JT2Go | <13.3.0.3 | |
Siemens Teamcenter Visualization | >=13.3<13.3.0.3 | |
Siemens Teamcenter Visualization | >=14.0<14.0.0.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2022-29028 is medium, with a severity value of 5.5.
CVE-2022-29028 affects all versions of Siemens JT2Go prior to V13.3.0.3.
CVE-2022-29028 affects all versions of Siemens Teamcenter Visualization V13.3 prior to V13.3.0.3.
CVE-2022-29028 affects all versions of Siemens Teamcenter Visualization V14.0 prior to V14.0.0.1.
To fix CVE-2022-29028, update to JT2Go V13.3.0.3 or later, or update to Teamcenter Visualization V13.3.0.3 or V14.0.0.1 or later.