Crash Vulnerability in SAP 3D Visual Enterprise Viewer Affecting File Handling

CVE-2022-32240

What is CVE-2022-32240?

A vulnerability exists in SAP 3D Visual Enterprise Viewer that allows an attacker to exploit file handling mechanisms. When manipulated Jupiter Tesselation (.jt, JTReader.x3d) files are opened from untrusted sources, the application may crash, resulting in temporary unavailability until it is manually restarted by the user. This poses significant risks, particularly in environments where the application is utilized for viewing critical 3D models.

References