CVE:CVE-2021-44018
CNNVD:CNNVD-202202-811
Siemens JT2GO等都是德国Siemens公司的产品。Siemens JT2GO是一款JT文件查看器。Siemens Teamcenter Visualization是一个可为设计2D、3D场景提供团队协作功能的软件。Siemens Solid Edge是一款三维CAD软件。
Siemens Solid Edge、JT2Go和Teamcenter Visualization 中存在缓冲区错误漏洞，该漏洞源于 plmxmlAdapterSE70.dll 库在解析特制 PAR 文件时容易受到内存损坏情况的影响。攻击者可以利用此漏洞在当前进程的上下文中执行代码。
solution:Upgrade siemens jt2go to a higher version than 13.2.0.7,and avoid the version (,13.2.0.7); Upgrade siemens solid_edge to a higher version than se2021,se2021:maintenance_pack1,se2021:maintenance_pack2,se2021:maintenance_pack3,se2021:maintenance_pack4,se2021:maintenance_pack5,se2021:maintenance_pack6,se2021:maintenance_pack7,se2021:maintenance_pack8,se2022,and avoid the version se2021,se2021:maintenance_pack1,se2021:maintenance_pack2,se2021:maintenance_pack3,se2021:maintenance_pack4,se2021:maintenance_pack5,se2021:maintenance_pack6,se2021:maintenance_pack7,se2021:maintenance_pack8,se2022; Upgrade siemens teamcenter_visualization to a higher version than 13.2.0.7,13.3.0.1,13.1.0,and avoid the version [13.2.0,13.2.0.7),[13.3.0,13.3.0.1),13.1.0