First published: Tue Oct 11 2022(Updated: )
Due to lack of proper memory management, when a victim opens manipulated Windows Cursor File (.cur, ico.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
Credit: cna@sap.com
Affected Software | Affected Version | How to fix |
---|---|---|
SAP 3D Visual Enterprise Author | =9.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this issue is CVE-2022-41183.
The SAP 3D Visual Enterprise Author version 9 is affected by this vulnerability.
The severity of CVE-2022-41183 is medium.
The Common Weakness Enumeration (CWE) ID for this vulnerability is CWE-119.
To fix CVE-2022-41183, it is recommended to update SAP 3D Visual Enterprise Author to a patched version provided by the vendor.