X_T File Parsing Vulnerabilities in Teamcenter Visualization and JT2Go

An attacker could trick a user into opening a malicious X_T file (JT format), allowing the attacker to run arbitrary code with the same permissions as the user running the visualization software, potentially compromising engineering workstations and CAD design data.

Engineering and design departments using Teamcenter Visualization or JT2Go for CAD model review and analysis. This particularly affects manufacturing, product development, and mechanical design teams that receive JT format files from external suppliers, vendors, or consultants.

An attacker crafts a malicious X_T format file and sends it to an engineering or design staff member. When the user opens the file in Teamcenter Visualization or JT2Go, the application's file parser encounters an out-of-bounds read or null pointer dereference, crashing the application or executing arbitrary code in the context of the logged-in user.