Memory Management Vulnerability in SAP 3D Visual Enterprise Viewer
CVE-2022-41194

7.8HIGH

Key Information:

Vendor

SAP
Status
SAP 3d Visual Enterprise Viewer
Vendor
CVE Published:
11 October 2022

What is CVE-2022-41194?

A vulnerability exists in SAP 3D Visual Enterprise Viewer version 9 due to improper memory management. When users open specially crafted Encapsulated Postscript (.eps, ai.x3d) files from untrusted sources, it can lead to the application crashing, making it temporarily unavailable until restarted. Users should exercise caution when handling untrusted files to mitigate potential disruptions.

Affected Version(s)

SAP 3D Visual Enterprise Viewer 9

References

https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-...
https://launchpad.support.sap.com/#/notes/3245928

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.