CVE-2022-22537: Input Validation

Published Feb 9, 2022

Updated

When a user opens a manipulated Tagged Image File Format (.tiff, 2d.x3d)) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant information can be found below.

Affected Software

1 affected component

SAP 3D Visual Enterprise Viewer=9

Event History

Feb 9, 2022

CVE Published

via MITRE·10:05 PM

Data Sourced

via MITRE·10:05 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2022-22537?

CVE-2022-22537 is a vulnerability in SAP 3D Visual Enterprise Viewer version 9.0 that allows a manipulated Tagged Image File Format (.tiff, 2d.x3d) from untrusted sources to cause the application to crash and become temporarily unavailable.

How does CVE-2022-22537 affect SAP 3D Visual Enterprise Viewer?

CVE-2022-22537 affects SAP 3D Visual Enterprise Viewer version 9.0 and causes the application to crash and become temporarily unavailable when a user opens a manipulated Tagged Image File Format (.tiff, 2d.x3d) from untrusted sources.

What is the severity rating of CVE-2022-22537?

CVE-2022-22537 has a severity rating of medium with a score of 6.5 out of 10.

How can I fix CVE-2022-22537?

To fix CVE-2022-22537, it is recommended to update SAP 3D Visual Enterprise Viewer to a version that is not affected by the vulnerability.

Where can I find more information about CVE-2022-22537?

You can find more information about CVE-2022-22537 in the SAP Security Note 3134684 and the SAP document provided.