Nafiez

**Name of the Vulnerable Software and Affected Versions** Windows Print Spooler Components (affected versions not specified) **Description** A use after free issue in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. Use after free occurs when an application continues to use a pointer after it has been freed, which can lead to memory corruption or arbitrary code execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Solid Edge SE2024 versions prior to V224.0 Update 10 **Description** The issue is related to an integer underflow vulnerability when processing PAR files. This could allow an attacker to execute code in the context of the current process. The vulnerability can be triggered by parsing specially crafted PAR files. **Recommendations** For Solid Edge SE2024 versions prior to V224.0 Update 10, update to V224.0 Update 10 or later to resolve the issue. As a temporary workaround, consider restricting the processing of PAR files from untrusted sources until a patch is applied. Avoid using the affected application to parse specially crafted PAR files until the issue is resolved.

Name of the Vulnerable Software and Affected Versions: Solid Edge SE2024 versions prior to V224.0 Update 5 Description: The issue is related to a heap-based buffer overflow in the dynamic memory when processing specially crafted ASM files. This could allow an attacker to execute code in the context of the current process. Recommendations: For Solid Edge SE2024 versions prior to V224.0 Update 5, update to V224.0 Update 5 or later to resolve the issue. As a temporary workaround, consider avoiding the use of specially crafted ASM files until a patch is applied. Restrict access to the vulnerable application to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Solid Edge SE2024 versions prior to V224.0 Update 9 **Description** A DLL hijacking issue has been identified, which could allow an attacker to execute arbitrary code by placing a crafted DLL file on the system. The vulnerability is related to an uncontrolled search path element. **Recommendations** For versions prior to V224.0 Update 9, update to V224.0 Update 9 or later to resolve the issue. As a temporary workaround, consider restricting access to the system to minimize the risk of exploitation. Avoid placing untrusted DLL files in the system to prevent potential attacks.

Name of the Vulnerable Software and Affected Versions: APDFL library versions (affected versions not specified) Description: The issue is related to an out of bounds read past the end of an allocated structure while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process. The vulnerability is also associated with a buffer overflow in memory, which can be exploited by an attacker using a specially crafted PDF file. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** JT2Go versions prior to V2312.0001 Teamcenter Visualization V14.1 versions prior to V14.1.0.13 Teamcenter Visualization V14.2 versions prior to V14.2.0.10 Teamcenter Visualization V14.3 versions prior to V14.3.0.7 Teamcenter Visualization V2312 versions prior to V2312.0001 **Description** The issue is related to an out of bounds write vulnerability when parsing a specially crafted CGM file. This could allow an attacker to execute code in the context of the current process. The vulnerability is associated with a buffer overflow in memory, which can be exploited using specially crafted CGM files, potentially allowing an attacker to execute arbitrary code. **Recommendations** For JT2Go versions prior to V2312.0001, update to version V2312.0001 or later. For Teamcenter Visualization V14.1 versions prior to V14.1.0.13, update to version V14.1.0.13 or later. For Teamcenter Visualization V14.2 versions prior to V14.2.0.10, update to version V14.2.0.10 or later. For Teamcenter Visualization V14.3 versions prior to V14.3.0.7, update to version V14.3.0.7 or later. For Teamcenter Visualization V2312 versions prior to V2312.0001, update to version V2312.0001 or later.

**Name of the Vulnerable Software and Affected Versions** Tecnomatix Plant Simulation V2201 (All versions) Tecnomatix Plant Simulation V2302 versions prior to V2302.0007 **Description** A null pointer dereference vulnerability has been identified in the affected applications while parsing specially crafted SPP files. An attacker could leverage this vulnerability to crash the application, causing a denial of service condition. The vulnerability is related to the parsing of SPP files and can be exploited by an attacker to cause a denial of service. **Recommendations** For Tecnomatix Plant Simulation V2201, update to a version that includes the fix for this issue. For Tecnomatix Plant Simulation V2302, update to version V2302.0007 or later to resolve the issue. As a temporary workaround, consider restricting the use of specially crafted SPP files to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Tecnomatix Plant Simulation versions V2201 through V2302.0006 **Description** The issue is related to an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. The vulnerability can be exploited by using specially created SPP files. **Recommendations** For Tecnomatix Plant Simulation version V2201, update to a version newer than V2201. For Tecnomatix Plant Simulation version V2302, update to version V2302.0007 or newer. As a temporary workaround, consider restricting the use of SPP files until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Tecnomatix Plant Simulation versions V2201 through V2302.0006 **Description** The issue is related to a null pointer dereference vulnerability. This vulnerability can be exploited by an attacker using specially crafted SPP files, potentially causing a denial of service condition by crashing the application. **Recommendations** For Tecnomatix Plant Simulation version V2201, update to a version newer than V2201. For Tecnomatix Plant Simulation version V2302, update to version V2302.0007 or newer. As a temporary workaround, consider restricting the use of specially crafted SPP files to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Tecnomatix Plant Simulation versions prior to V2201.0012 Tecnomatix Plant Simulation versions prior to V2302.0006 **Description** A vulnerability has been identified in the affected applications, which contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the current process. The issue is related to a buffer read beyond the allocated memory, which can be exploited using specially crafted SPP files, potentially allowing an attacker to execute arbitrary code. **Recommendations** For versions prior to V2201.0012, update to version V2201.0012 or later. For versions prior to V2302.0006, update to version V2302.0006 or later. As a temporary workaround, consider restricting the use of specially crafted SPP files until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Tecnomatix Plant Simulation versions V2201 through V2302.0006 **Description** The issue is related to a null pointer dereference vulnerability. This vulnerability can be exploited by an attacker using specially crafted SPP files, potentially causing a denial of service condition by crashing the application. **Recommendations** For Tecnomatix Plant Simulation V2201, update to a version later than V2201. For Tecnomatix Plant Simulation V2302, update to version V2302.0007 or later. As a temporary workaround, consider restricting the use of specially crafted SPP files to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** JT2Go (affected versions not specified) Teamcenter Visualization (affected versions not specified) **Description** The issue is related to a memory corruption vulnerability in the APDFL.dll library, which occurs when parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process. **Recommendations** For JT2Go, consider disabling the use of the APDFL.dll library until a patch is available. For Teamcenter Visualization, restrict access to the APDFL.dll library to minimize the risk of exploitation. Avoid using the APDFL.dll library for parsing PDF files until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** APDFL.dll (affected versions not specified) **Description** The issue is related to an out-of-bounds write past a fixed-length heap-based buffer in the APDFL.dll while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process. The vulnerability is associated with the JT2Go 3D viewer tool and the Teamcenter Visualization product lifecycle management system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** APDFL.dll (affected versions not specified) **Description** The issue is related to a stack-based buffer overflow in the APDFL.dll, which can be triggered by parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process. The vulnerability is associated with the JT2Go 3D viewer tool and the Teamcenter Visualization product lifecycle management system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Microsoft Office Access Connectivity Engine (affected versions not specified) Description: A remote code execution issue exists due to the improper handling of objects in memory by the Microsoft Office Access Connectivity Engine. This could allow an attacker to execute arbitrary code on a victim system by enticing them to open a specially crafted file. The issue is resolved by correcting how the engine handles objects in memory. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Internet Explorer (affected versions not specified) **Description** The issue is caused by Internet Explorer improperly accessing objects in memory, which can lead to memory corruption. This allows a remote attacker to execute arbitrary code in the context of the current user. If the current user has administrative rights, the attacker could take control of the affected system, install programs, view, change or delete data, or create new accounts with full user rights. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Netwide Assembler (NASM) version 2.14rc15 **Description** The issue is related to a buffer over-read in the x86/regflags.c file of the Netwide Assembler (NASM). **Recommendations** For Netwide Assembler (NASM) version 2.14rc15, at the moment, there is no information about a newer version that contains a fix for this issue.

Name of the Vulnerable Software and Affected Versions: sharutils version 4.15.2 Description: The issue is related to a Buffer Overflow in the `unshar` command, specifically in the `unshar.c` file at line 75, within the `looks like c code` function. This occurs due to a failure in checking the buffer containing the input line, which could lead to code execution. The attack appears to be exploitable if a victim runs the `unshar` command on a specially crafted file. Recommendations: For sharutils version 4.15.2, consider avoiding the use of the `unshar` command until a patch is available, or apply any available patches to resolve the Buffer Overflow issue in the `looks like c code` function. As a temporary workaround, restrict the execution of specially crafted files with the `unshar` command to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Poppler versions prior to 0.40.0 **Description** The issue is related to a heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function. This can be triggered by remote attackers via an invalid blend mode in the ExtGState dictionary in a crafted PDF document, potentially leading to a denial of service (memory corruption and crash) or possibly the execution of arbitrary code. **Recommendations** For versions prior to 0.40.0, update to version 0.40.0 or later to resolve the issue. As a temporary workaround, consider restricting the processing of PDF documents from untrusted sources until the update is applied.