SAP 3D Visual Enterprise Author .slddrw Buffer Overflow Vulnerability

SAP 3D Visual Enterprise Author is a desktop application from SAP Germany for managing 2D, 3D, animation, video and audio assets. SAP 3D Visual Enterprise Author version 9 is vulnerable to a buffer overflow vulnerability that stems from a lack of proper memory management and could be exploited by an attacker via a specially crafted file (.slddrw, CoreCadTranslator.exe) to payload to remotely execute code when forcing a stack-based overflow or reusing a dangling pointer to an overwritten space in memory.