Lucene search
K

Siemens JT2Go BMP File Parsing Use-After-Free Remote Code Execution Vulnerability

🗓️ 19 Jul 2021 00:00:00Reported by xina1i at SecZoneType 
zdi
 zdi
🔗 www.zerodayinitiative.com👁 60 Views

Siemens JT2Go BMP File Parsing Use-After-Free Remote Code Execution Vulnerability. Allows remote attackers to execute arbitrary code, requiring user interaction to exploit through visiting a malicious page or opening a malicious file. Specifically, the flaw exists in the parsing of BMP files due to lack of validation, enabling an attacker to execute code in the current process

Related
Refs

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

19 Jul 2021 00:00Current
4.4Medium risk
Vulners AI Score4.4
CVSS 37.8
EPSS0.00418
60