Memory Management Issue in SAP 3D Visual Enterprise Author by SAP
CVE-2022-41181

5.5MEDIUM

Key Information:

Vendor
SAP
Status
SAP 3d Visual Enterprise Author
Vendor
CVE Published:
11 October 2022

Summary

A vulnerability exists in SAP 3D Visual Enterprise Author version 9 related to inadequate memory management. When a user opens a specially crafted Portable Document Format (PDF) file from untrusted sources, the application can crash, rendering it temporarily unavailable until it is restarted. This jeopardizes the application's stability and could lead to potential disruptions in the workflow. Users are advised to exercise caution when handling PDF files from unknown or untrusted origins.

Affected Version(s)

SAP 3D Visual Enterprise Author 9

References

https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-...
https://launchpad.support.sap.com/#/notes/3245929

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.