CVE-2021-44007

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to 13.2.0.5 Teamcenter Visualization versions prior to 13.2.0.5

Description: A vulnerability has been identified that could allow an attacker to cause a denial-of-service condition. The issue is related to an off-by-one error in the heap while parsing specially crafted TIFF files, which is contained in the Tiff Loader.dll.

Recommendations: For JT2Go versions prior to 13.2.0.5, update to version 13.2.0.5 or later to resolve the issue. For Teamcenter Visualization versions prior to 13.2.0.5, update to version 13.2.0.5 or later to resolve the issue. As a temporary workaround, consider restricting the use of the Tiff Loader.dll until a patch is available.