PT-2021-20258
CVE-2021-33680
·
تاريخ النشر
2021-07-14
·
تاريخ التحديث
2021-07-16
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
SAP 3D Visual Enterprise Viewer version 9
Description:
The issue allows a user to open a manipulated CGM file from untrusted sources, causing a buffer overflow. This results in the application crashing and becoming temporarily unavailable until the user restarts it.
Recommendations:
For SAP 3D Visual Enterprise Viewer version 9, avoid opening CGM files from untrusted sources to minimize the risk of exploitation. As a temporary workaround, consider implementing additional validation checks on CGM files before opening them in the application. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾