CVE-2023-24979

Siemens Tecnomatix Plant Simulation is affected by an out-of-bounds write in the SPP file parser for all versions before V2201.0006. The flaw can allow code execution in the current process context. Exploitation details indicate this could be triggered by parsing a crafted SPP file; in ZDI adviso...