Skip to content
3.3 Low

CVE-2024-37996 A vulnerability has been identified in JT Open (All versions < V11.5), JT2Go (All versions < V2406.0003), PLM XML SDK…

Description

A vulnerability has been identified in JT Open (All versions < V11.5), JT2Go (All versions < V2406.0003), PLM XML SDK (All versions < V7.1.0.014), Teamcenter Visualization V14.2 (All versions < V14.2.0.13), Teamcenter Visualization V14.3 (All versions < V14.3.0.11), Teamcenter Visualization V2312 (All versions < V2312.0008), Teamcenter Visualization V2406 (All versions < V2406.0003). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted XML files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.

Affected products and versions

Product Affected versions Fixed in
JT Open 11.5 earliest → < 11.5 11.5
JT2Go 2406.0003 earliest → < 2406.0003 2406.0003
PLM XML SDK 7.1 earliest → < 7.1.0.014 7.1.0.014
Teamcenter Visualization V14.2 14.2 earliest → < 14.2.0.13 14.2.0.13
Teamcenter Visualization V14.3 14.3 earliest → < 14.3.0.11 14.3.0.11
Teamcenter Visualization V2312 2312.0008 earliest → < 2312.0008 2312.0008
Teamcenter Visualization V2406 2406.0003 earliest → < 2406.0003 2406.0003

References

Timeline

  1. Published
  2. Last modified
The 10 CVEs of JT Open →
Track this CVE