Spring4Shell Vulnerabilities and GeoViewer

Issue

On March 29th, CVE-2022-22963 and CVE-2022-22965 were reported describing an exploit in the Spring4Shell library allowing a malicious user to download the Mirai sample to the “/tmp” folder and execute it after a permission change using “chmod”.

Solution

All versions of GeoViewer are NOT affected by the reported vulnerabilities.

Our development teams have reviewed all other vulnerabilities in our Geo products and have determined that all are low risk to the product. This means an attacker does not have control over what can be modified.

About GeoViewer Pro

GeoViewer Pro is a highly efficient geospatial images viewer designed for professionals dealing with extensive raster imagery, aeronautical images, satellite images, and GIS data. As far as HR images are concerned, complex GIS software is something that should be avoided whilst working with GeoViewer Pro. Use of standard image formats such as MrSID, GeoTIFF, JPEG 2000, NITF, ECW, PNG, JPEG, and TIFF is possible when using GeoViewer Pro software, which also gives the possibility of fast image rendering, comfortable zooming in, and convenient image navigation irrespective of image size (even multi-gigabyte). Thanks to the software, people engaged in a wide variety of spheres (such as GIS specialists, engineering and surveying, governmental institutions, and environmental scientists) have the chance to investigate various images, measure distances and areas, and obtain metadata on the geospatial images. The user-friendly interface makes GeoViewer Pro a great time saver in terms of reducing hardware requirements owing to advanced imaging techniques used in image optimization.