Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-88939
HistoryOct 13, 2022 - 12:00 a.m.

SAP 3D Visual Enterprise Author .emf buffer overflow vulnerability

2022-10-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
sap germany
desktop application
2d assets
3d assets
animation
video
audio
version 9
buffer overflow
memory management
attacker
crafted files
stack-based overflow
remote code execution
dangling pointer
cnvd

EPSS

0.002

Percentile

52.8%

SAP 3D Visual Enterprise Author is a desktop application from SAP Germany for managing 2D, 3D, animation, video and audio assets. version 9 of SAP 3D Visual Enterprise Author is vulnerable to a buffer overflow vulnerability that stems from a lack of proper memory management and could be exploited by an attacker via specially crafted files (.emf, emf.x3d) to force a stack-based overflow at payload or to reuse remote code execution when pointing to a dangling pointer to an overwritten space in memory.

EPSS

0.002

Percentile

52.8%

Related for CNVD-2022-88939