ZDI-23-750: SAP 3D Visual Enterprise Author DST File Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Author. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-750?
The severity of ZDI-23-750 is significant due to its potential for remote code execution.
How do I fix ZDI-23-750?
To fix ZDI-23-750, users should apply the latest security updates provided by SAP for the 3D Visual Enterprise Author.
Who is affected by ZDI-23-750?
ZDI-23-750 affects installations of SAP 3D Visual Enterprise Author that have not been updated.
What does ZDI-23-750 allow an attacker to do?
ZDI-23-750 allows remote attackers to execute arbitrary code on vulnerable installations.
What is required for an attacker to exploit ZDI-23-750?
Exploitation of ZDI-23-750 requires user interaction, such as visiting a malicious page or opening a malicious file.