Siemens Teamcenter Visualization and Tecnomatix Plant Simulation Out-of-Bounds Read Vulnerability Allowing Code Execution

A vulnerability allowing out-of-bounds read past the end of an allocated structure has been identified in multiple versions of Siemens Teamcenter Visualization and Tecnomatix Plant Simulation. This vulnerability arises while parsing specially crafted WRL files, potentially leading to memory corruption. An attacker could exploit this issue to execute code in the context of the current process.

Impact

Exploitation of this vulnerability could result in arbitrary code execution within the affected application, potentially allowing an attacker to execute malicious code in the context of the current user.

Remediation

Users are advised to update to the latest versions of the affected products. Specific update instructions can be found in the Siemens Security Advisory SSA-050438.