PT-2021-20258

CVE-2021-33680

·

تاريخ النشر

2021-07-14

·

تاريخ التحديث

2021-07-16

الوصف من

CVSS 3.1
6.5
متوسطة
المقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Viewer version 9
Description: The issue allows a user to open a manipulated CGM file from untrusted sources, causing a buffer overflow. This results in the application crashing and becoming temporarily unavailable until the user restarts it.
Recommendations: For SAP 3D Visual Enterprise Viewer version 9, avoid opening CGM files from untrusted sources to minimize the risk of exploitation. As a temporary workaround, consider implementing additional validation checks on CGM files before opening them in the application. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
التأثيرات
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾