ZDI-CAN-18118: ZDI-23-748: SAP 3D Visual Enterprise Author DST File Parsing Use-After-Free Remote Code Execution Vulnerability

Published May 31, 2023

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Author. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Affected Software

1 affected component

SAP 3D Visual Enterprise Author

Event History

May 31, 2023

Advisory Published

05:00 AM

Data Sourced

05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-18118?

ZDI-CAN-18118 is considered a high severity vulnerability due to its potential for remote code execution.

How do I fix ZDI-CAN-18118?

To fix ZDI-CAN-18118, users should apply the latest security patches provided by SAP for the 3D Visual Enterprise Author software.

What type of exploitation is possible with ZDI-CAN-18118?

ZDI-CAN-18118 can be exploited by remote attackers to execute arbitrary code on vulnerable installations.

Is user interaction required to exploit ZDI-CAN-18118?

Yes, to exploit ZDI-CAN-18118, the target user must either visit a malicious page or open a malicious file.

Which software is affected by ZDI-CAN-18118?

ZDI-CAN-18118 specifically affects SAP 3D Visual Enterprise Author.