Memory Management Vulnerability in SAP 3D Visual Enterprise Author
CVE-2022-41174

5.5MEDIUM

Key Information:

Vendor
SAP
Status
SAP 3d Visual Enterprise Author
Vendor
CVE Published:
11 October 2022

Summary

A vulnerability has been identified in SAP 3D Visual Enterprise Author, allowing for potential application crashes when users open specially crafted Right Hemisphere Material (.rhm, rh.x3d) files from untrusted sources. This flaw results from improper memory management and can lead to temporary application unavailability, requiring a restart to regain functionality.

Affected Version(s)

SAP 3D Visual Enterprise Author 9

References

https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-...
https://launchpad.support.sap.com/#/notes/3245929

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.