PT-2021-20238
CVE-2021-33660
·
Published
2021-06-09
·
Updated
2021-06-11
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
SAP 3D Visual Enterprise Viewer version 9
Description:
The issue is caused by improper input validation, allowing a user to open a manipulated FLI file from untrusted sources. This results in the application crashing and becoming temporarily unavailable until the user restarts it.
Recommendations:
For SAP 3D Visual Enterprise Viewer version 9, consider validating all input files, especially those from untrusted sources, to prevent the application from crashing. As a temporary workaround, restrict the opening of FLI files from untrusted sources until a fix is available.
Found an issue in the description? Have something to add? Feel free to write us 👾