CVE-2022-32237

MEDIUM

SAP 3D Visual Enterprise Viewer < 9.0 - Denial of Service via Malformed CGM File

Title source: llm
STIX 2.1

Description

When a user opens manipulated Computer Graphics Metafile (.cgm, CgmCore.dll) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application.

References (2)

Core 2
Core References
Permissions Required, Vendor Advisory x_refsource_misc
https://launchpad.support.sap.com/#/notes/3206271

Scores

CVSS v3 5.5
EPSS 0.0014
EPSS Percentile 34.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE
CWE-20
Status published
Products (1)
sap/3d_visual_enterprise_viewer < 9.0
Published Jun 14, 2022
Tracked Since Feb 18, 2026