SAP 3D Visual Enterprise Author .igs Buffer Overflow Vulnerability

SAP 3D Visual Enterprise Author, a desktop application for managing 2D, 3D, animation, video and audio assets from SAP, Germany, is vulnerable to a buffer overflow vulnerability in SAP 3D Visual Enterprise Author version 9, which stems from a lack of proper memory management and could be exploited by an attacker via specially crafted files (.igs, .iges, CoreCadTranslator.exe) to remotely execute code under payload force a stack-based overflow or reuse a dangling pointer to an overwritten space in memory to remotely execute code.