PT-2021-17523
CVE-2021-27585
·
تاريخ النشر
2021-03-09
·
تاريخ التحديث
2021-03-25
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SAP 3D Visual Enterprise Viewer version 9
Description
The issue occurs when a user opens manipulated Computer Graphics Metafile (.CGM) format files received from untrusted sources, causing the application to crash and become temporarily unavailable until restart. This is related to a memory corruption and stack-based buffer overflow issue when parsing CGM files.
Recommendations
For SAP 3D Visual Enterprise Viewer version 9, consider avoiding the use of CGM file parsing functionality until a patch is available. As a temporary workaround, restrict the opening of .CGM files from untrusted sources to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾