SAP 3D Visual Enterprise Author Buffer Overflow Vulnerability (CNVD-2022-69693)

SAP 3D Visual Enterprise Author is a desktop application from SAP Germany for managing 2D, 3D, animation, video and audio assets. SAP 3D Visual Enterprise Author suffers from a buffer overflow vulnerability, which stems from a lack of proper memory management and can be exploited by an attacker to vulnerability via specially crafted files (.obj, ObjTranslator.exe), triggering remote code execution when the payload forces a stack-based overflow or reuses a dangling pointer to an overwritten space in memory.