Memory Management Flaw in SAP 3D Visual Enterprise Author Affects SolidWorks Files
CVE-2022-39807

5.5MEDIUM

Key Information:

Vendor
SAP
Status
SAP 3d Visual Enterprise Author
Vendor
CVE Published:
11 October 2022

Summary

A significant memory management flaw exists in SAP 3D Visual Enterprise Author, particularly when processing manipulated SolidWorks Drawing files received from untrusted sources. This vulnerability can lead to application crashes, rendering the software temporarily unavailable to users until a restart is performed. It emphasizes the importance of secure file handling practices to prevent potential disruptions in workflow.

Affected Version(s)

SAP 3D Visual Enterprise Author 9

References

https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-...
https://launchpad.support.sap.com/#/notes/3245929

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.