{"id":39878,"date":"2025-05-18T17:28:40","date_gmt":"2025-05-18T17:28:40","guid":{"rendered":""},"modified":"2025-07-05T17:27:00","modified_gmt":"2025-07-05T23:27:00","slug":"cve-2023-51746-stack-overflow-vulnerability-within-jt2go-and-teamcenter-visualization-software","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2023-51746-stack-overflow-vulnerability-within-jt2go-and-teamcenter-visualization-software\/","title":{"rendered":"<strong>CVE-2023-51746: Stack Overflow Vulnerability within JT2Go and Teamcenter Visualization Software<\/strong>"},"content":{"rendered":"<p><strong>Overview<\/strong><\/p>\n<p>In the cybersecurity world, newly discovered vulnerabilities can put numerous systems at risk. One such vulnerability, identified as CVE-2023-51746, affects several versions of the JT2Go and Teamcenter Visualization software. This <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-4648-integrity-check-vulnerability-in-centreon-web-leading-to-potential-xss-injection\/\"  data-wpil-monitor-id=\"49899\">vulnerability is of significance due to its potential<\/a> to cause system compromise or data leakage, thus it is crucial for organizations using these applications to understand the risk and take appropriate remediation measures.<br \/>\nThe risk lies in a stack <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-4356-critical-buffer-overflow-vulnerability-in-tenda-dap-1520\/\"  data-wpil-monitor-id=\"44665\">overflow vulnerability<\/a> that occurs during the parsing of maliciously crafted CGM files. This could potentially allow an attacker to execute code within the context of the current process, <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-29972-server-side-request-forgery-vulnerability-in-azure-leading-to-potential-system-compromise\/\"  data-wpil-monitor-id=\"44752\">leading to serious consequences such as system<\/a> compromise or data leakage.<\/p>\n<p><strong>Vulnerability Summary<\/strong><\/p>\n<p>CVE ID: CVE-2023-51746<br \/>\nSeverity: High &#8211; CVSS Score 7.8<br \/>\nAttack Vector: Local<br \/>\nPrivileges Required: Low<br \/>\nUser Interaction: Required<br \/>\nImpact: <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2023-42977-path-handling-vulnerability-that-risks-data-leakage-and-system-compromise\/\"  data-wpil-monitor-id=\"56979\">System Compromise or Data Leakage<\/a><\/p>\n<p><strong>Affected Products<\/strong><\/p><div id=\"ameeb-3718045829\" class=\"ameeb-content-2 ameeb-entity-placement\"><div style=\"border-left: 4px solid #555; padding-left: 20px; margin: 48px 0; font-family: Roboto, sans-serif; color: #ffffff; line-height: 1.6; max-width: 700px;\">\r\n  <h2 style=\"margin-top: 0; font-size: 20px; font-weight: 600; display: flex; align-items: center;\">\r\n    <a href=\"https:\/\/www.ameeba.com\/chat\" style=\"display: inline-flex; align-items: center; margin-right: 8px;\">\r\n      <img decoding=\"async\" src=\"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/10\/Best-App-icon-Ameeba.png\" alt=\"Ameeba Chat Icon\" style=\"width: 40px; height: 40px;\" \/>\r\n    <\/a>\r\n    A new way to communicate\r\n  <\/h2>\r\n\r\n  <p style=\"margin-bottom: 12px;\">\r\n    Ameeba Chat is built on encrypted identity, not personal profiles.\r\n  <\/p>\r\n\r\n  <p style=\"margin-bottom: 16px;\">\r\n    Message, call, share files, and coordinate with identities kept separate.\r\n  <\/p>\r\n\r\n  <ul style=\"list-style: none; padding-left: 0; margin-bottom: 20px;\">\r\n    <li>\u2022 Encrypted identity<\/li>\r\n    <li>\u2022 Ameeba Chat authenticates access<\/li>\r\n    <li>\u2022 Aliases and categories<\/li>\r\n    <li>\u2022 End-to-end encrypted chat, calls, and files<\/li>\r\n    <li>\u2022 Secure notes for sensitive information<\/li>\r\n  <\/ul>\r\n\r\n  <p style=\"font-style: italic; font-weight: 600; margin-bottom: 24px;\">\r\n    Private communication, rethought.\r\n  <\/p>\r\n\r\n  <div style=\"display: flex; flex-wrap: wrap; gap: 12px;\">\r\n    <a href=\"https:\/\/www.ameeba.com\/chat\/download\" style=\"background-color: #ffffff; color: #000000; padding: 10px 20px; text-decoration: none; border-radius: 6px; font-weight: 500;\">Download Ameeba Chat<\/a>\r\n    <a href=\"https:\/\/www.ameeba.com\/chat\" style=\"border: 1px solid #ffffff; color: #ffffff; padding: 10px 20px; text-decoration: none; border-radius: 6px; font-weight: 500;\">Learn More<\/a>\r\n  <\/div>\r\n<\/div>\r\n<\/div>\n<p>Product | Affected Versions<\/p>\n<p>JT2Go | All versions < V14.3.0.6\n<a href=\"https:\/\/www.ameeba.com\/blog\/cve-2023-51745-stack-overflow-vulnerability-in-various-versions-of-teamcenter-visualization-and-jt2go\/\"  data-wpil-monitor-id=\"47349\">Teamcenter Visualization V13.3 | All versions<\/a> < V13.3.0.13\n<a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-32454-out-of-bounds-read-in-teamcenter-visualization-leading-to-potential-code-execution\/\"  data-wpil-monitor-id=\"64110\">Teamcenter Visualization<\/a> V14.1 | All versions < V14.1.0.12\nTeamcenter Visualization V14.2 | All versions < V14.2.0.9\nTeamcenter Visualization V14.3 | All versions < V14.3.0.6\n\n<strong>How the Exploit Works<\/strong><\/p>\n<p>The exploit takes advantage of a stack <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-4368-critical-buffer-overflow-vulnerability-in-tenda-ac8-16-03-34-06\/\"  data-wpil-monitor-id=\"44669\">overflow vulnerability<\/a> present in the affected applications while parsing specially crafted CGM files. This means that an attacker can design a CGM file in such a way that it causes the application&#8217;s <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-45845-authenticated-stack-overflow-vulnerability-in-totolink-nr1800x\/\"  data-wpil-monitor-id=\"44787\">stack buffer to overflow<\/a> when it is parsed. This overflow can then be used to execute <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-25014-prototype-pollution-vulnerability-in-kibana-leading-to-arbitrary-code-execution\/\"  data-wpil-monitor-id=\"44880\">arbitrary code<\/a> in the context of the current process.<\/p>\n<p><strong>Conceptual Example Code<\/strong><\/p>\n<p>Here is a conceptual example of how the vulnerability might be exploited. This pseudo-code represents a malicious payload embedded within a CGM file, which when parsed by the application, causes a <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-45846-authenticated-stack-overflow-vulnerability-in-alfa-aip-w512-v3-2-2-2-3\/\"  data-wpil-monitor-id=\"44789\">stack overflow<\/a>:<\/p><div id=\"ameeb-3428978467\" class=\"ameeb-content ameeb-entity-placement\"><div class=\"poptin-embedded\" data-id=\"f6b387694f681\"><\/div>\r\n\r\n\r\n\r\n\r\n\r\n<\/div>\n<pre><code class=\"\" data-line=\"\">void malicious_function() {\nchar buffer[10];\nfor(int i=0; i&lt;100; i++) {\nbuffer[i] = &#039;A&#039;; \/\/ This line causes stack overflow\n}\n\/\/ Insert malicious code here to be executed after overflow\n}<\/code><\/pre>\n<p>This code attempts to fill a buffer with a size of 10 with 100 characters, causing a <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-45843-authenticated-stack-overflow-vulnerability-in-totolink-nr1800x\/\"  data-wpil-monitor-id=\"44790\">stack overflow<\/a>. The attacker can then use this overflow to <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-46193-remote-code-execution-vulnerability-in-sourcecodester-client-database-management-system-1-0\/\"  data-wpil-monitor-id=\"45306\">execute malicious code<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Overview In the cybersecurity world, newly discovered vulnerabilities can put numerous systems at risk. One such vulnerability, identified as CVE-2023-51746, affects several versions of the JT2Go and Teamcenter Visualization software. This vulnerability is of significance due to its potential to cause system compromise or data leakage, thus it is crucial for organizations using these applications [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"footnotes":""},"categories":[1],"tags":[],"vendor":[],"product":[],"attack_vector":[86],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-39878","post","type-post","status-publish","format-standard","hentry","category-uncategorized","attack_vector-buffer-overflow"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts\/39878","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/comments?post=39878"}],"version-history":[{"count":12,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts\/39878\/revisions"}],"predecessor-version":[{"id":57631,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts\/39878\/revisions\/57631"}],"wp:attachment":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/media?parent=39878"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/categories?post=39878"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/tags?post=39878"},{"taxonomy":"vendor","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/vendor?post=39878"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/product?post=39878"},{"taxonomy":"attack_vector","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/attack_vector?post=39878"},{"taxonomy":"asset_type","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/asset_type?post=39878"},{"taxonomy":"severity","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/severity?post=39878"},{"taxonomy":"exploit_status","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/exploit_status?post=39878"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}