Memory Management Flaw in SAP 3D Visual Enterprise Author by SAP
CVE-2022-41183

5.5MEDIUM

Key Information:

Vendor

SAP
Status
SAP 3d Visual Enterprise Author
Vendor
CVE Published:
11 October 2022

What is CVE-2022-41183?

A memory management flaw in SAP 3D Visual Enterprise Author allows an attacker to manipulate Windows Cursor files (.cur or .ico.x3d) that, when opened by a victim, can lead to application crashes. This occurs due to improper handling of memory, rendering the application temporarily unavailable until it is restarted. Users are advised to exercise caution when opening files from untrusted sources and to stay updated with the latest security patches.

Affected Version(s)

SAP 3D Visual Enterprise Author 9

References

https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-...
https://launchpad.support.sap.com/#/notes/3245929

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.