Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-88933
HistoryOct 13, 2022 - 12:00 a.m.

SAP 3D Visual Enterprise Author .cgm Buffer Overflow Vulnerability

2022-10-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
sap germany
3d visual enterprise author
buffer error
memory management
remote code execution

0.002 Low

EPSS

Percentile

52.9%

SAP 3D Visual Enterprise Author is a desktop application from SAP Germany for managing 2D, 3D, animation, video and audio assets.SAP 3D Visual Enterprise Author version 9 contains a buffer error vulnerability that stems from a lack of proper memory management and can be exploited by attackers via specially crafted files (.cgm, CgmTranslator.exe) to remotely execute code when the payload forces a stack overflow or reuse a dangling pointer to an overwritten space in memory to remotely execute code.

0.002 Low

EPSS

Percentile

52.9%

Related for CNVD-2022-88933