CVE-2023-51744: Null Pointer Dereference
A vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization V13.3 (All versions < V13.3.0.13), Teamcenter Visualization V14.1 (All versions < V14.1.0.12), Teamcenter Visualization V14.2 (All versions < V14.2.0.9), Teamcenter Visualization V14.3 (All versions < V14.3.0.6). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted CGM files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-51744?
The severity of CVE-2023-51744 is classified as critical.
How do I fix CVE-2023-51744?
To fix CVE-2023-51744, update JT2Go to version 14.3.0.6 or later, and Teamcenter Visualization to the patched versions indicated.
What software versions are affected by CVE-2023-51744?
CVE-2023-51744 affects JT2Go versions prior to 14.3.0.6 and Teamcenter Visualization versions prior to 13.3.0.13, 14.1.0.12, 14.2.0.9, and 14.3.0.6.
Is there a workaround for CVE-2023-51744?
As of now, there are no known workarounds for CVE-2023-51744, and upgrading to the latest versions is necessary.
What are the potential impacts of CVE-2023-51744?
CVE-2023-51744 could potentially allow an attacker to execute arbitrary code or compromise system integrity.