CVE-2022-41181 — Improper Restriction of Operations within the Bounds of a Memory Buffer in SE SAP 3D Visual Enterprise Author

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer3 documents3 sources

Severity

5.5MEDIUMNVD

EPSS

0.0%

top 85.94%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

SAP SE SAP 3D Visual Enterprise Author SAP 3D Visual Enterprise Author

Timeline

PublishedOct 11

Latest updateOct 12

Description

Due to lack of proper memory management, when a victim opens manipulated Portable Document Format (.pdf, PDFPublishing.dll) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶NVDsap/3d_visual_enterprise_author9.0

▶CVEListV5sap_se/sap_3d_visual_enterprise_author9

🔴Vulnerability Details

GHSA

GHSA-vhr6-32q6-wwvf: Due to lack of proper memory management, when a victim opens manipulated Portable Document Format (↗2022-10-12

▶

CVEList

CVE-2022-41181: Due to lack of proper memory management, when a victim opens manipulated Portable Document Format (↗2022-10-11

▶