CVE-2022-22538: Input Validation

Published Feb 9, 2022

Updated

When a user opens a manipulated Adobe Illustrator file format (.ai, ai.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant information can be found below.

Affected Software

1 affected component

SAP 3D Visual Enterprise Viewer=9

Event History

Feb 9, 2022

CVE Published

via MITRE·10:05 PM

Data Sourced

via MITRE·10:05 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2022-22538?

CVE-2022-22538 is a vulnerability in SAP 3D Visual Enterprise Viewer version 9.0 that allows a user to crash the application by opening a manipulated Adobe Illustrator file received from untrusted sources.

How does CVE-2022-22538 affect SAP 3D Visual Enterprise Viewer?

CVE-2022-22538 affects SAP 3D Visual Enterprise Viewer version 9.0, causing the application to crash and become temporarily unavailable until a restart is performed.

What is the severity of CVE-2022-22538?

CVE-2022-22538 has a severity rating of medium with a CVSS score of 6.5.

How can I mitigate the CVE-2022-22538 vulnerability?

To mitigate the CVE-2022-22538 vulnerability, update SAP 3D Visual Enterprise Viewer to a version that is not affected by the vulnerability.

Are there any references available for CVE-2022-22538?

Yes, you can find references for CVE-2022-22538 at the following links: [link1](https://launchpad.support.sap.com/#/notes/3134684) and [link2](https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html).