CVE-2022-39808

Due to lack of proper memory management, when a victim opens a manipulated Wavefront Object .obj, ObjTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based...

CVE-2022-41180

Due to lack of proper memory management, when a victim opens a manipulated Portable Document Format .pdf, PDFPublishing.dll file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a...

CVE-2022-39803

Due to lack of proper memory management, when a victim opens a manipulated ACIS Part and Assembly .sat, CoreCadTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a...

CVE-2022-41177

Due to lack of proper memory management, when a victim opens a manipulated Iges Part and Assembly .igs, .iges, CoreCadTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload force...

CVE-2022-41196

SAP 3D Visual Enterprise Viewer 9 is affected by a WRL/VRML.X3D parsing vulnerability caused by improper memory management, enabling Remote Code Execution (RCE) when a manipulated file is opened. Public details (ZDI advisories) state exploitation requires user interaction (e.g., opening a malicio...

CVE-2022-41185

CVE-2022-41185 affects SAP 3D Visual Enterprise Author v9. A memory management vulnerability allows remote code execution when a manipulated Visual Design Stream (.vds) file containing MataiPersistence.dll is opened from untrusted sources. The issue arises from a stack-based overflow or reuse of ...

PT-2022-25689 · Autodesk +1 · Autocad +1

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Author version 9 Description: The issue arises due to inadequate memory management. When a manipulated AutoCAD .dwg file from untrusted sources is opened in SAP 3D Visual Enterprise Author, it can trigger Remote Code...

PT-2022-25703 · Sap · Pdfpublishing.Dll +1

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Author version 9 Description: The issue is caused by a lack of proper memory management. When a victim opens a manipulated Portable Document Format .pdf file received from untrusted sources, it is possible that a Remo...

CVE-2022-41200

Due to lack of proper memory management, when a victim opens a manipulated Scalable Vector Graphic .svg, svg.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based...

CVE-2022-41167

SAP 3D Visual Enterprise Author (v9) contains a DWG file parsing vulnerability in TeighaTranslator.exe that can lead to Remote Code Execution. The issue stems from parsing DWG data and can be triggered by crafted files, with two related variants described as use-after-free and buffer/stack overfl...

CVE-2022-39805

Due to lack of proper memory management, when a victim opens a manipulated Computer Graphics Metafile .cgm, CgmTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a...

CVE-2022-41169

Due to lack of proper memory management, when a victim opens manipulated CATIA5 Part .catpart, CatiaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until...

CVE-2022-39806

Summary of CVE-2022-39806 : The vulnerability affects SAP 3D Visual Enterprise Author (version 9) and specifically the parsing/handling of SolidWorks Drawing files (.slddrw) via CoreCadTranslator.exe. Root cause: improper memory management leading to a stack-based overflow or reuse of a dangling ...

SAP 3D Visual Enterprise Author 缓冲区错误漏洞

SAP 3D Visual Enterprise Author is a desktop application for managing 2D, 3D, animation, video and audio assets from SAP. A denial of service vulnerability exists in SAP 3D Visual Enterprise Author version 9, which stems from a lack of proper memory management and can be exploited by an attacker ...

CVE-2022-41173

Due to lack of proper memory management, when a victim opens manipulated AutoCAD .dxf, TeighaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restar...

CVE-2022-39807

Due to lack of proper memory management, when a victim opens manipulated SolidWorks Drawing .sldasm, CoreCadTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the us...

CVE-2022-41172

CVE-2022-41172 affects SAP 3D Visual Enterprise Author (v9) and relates to the DXF file parsing code. The issue stems from improper memory management during parsing of DXF payloads (e.g., AutoCAD .dxf with TeighaTranslator.exe), potentially allowing Remote Code Execution via a stack-based overflo...

CVE-2022-41175

CVE-2022-41175 affects SAP 3D Visual Enterprise Author v9, with the vulnerability occurring in EMF file parsing. The root cause is improper memory handling in EMF (.emf, emf.x3d) processing which can trigger Remote Code Execution when a crafted file causes a stack-based overflow or reuse of a dan...

CVE-2022-41176

SAP 3D Visual Enterprise Author (v9) is affected. The issue arises from improper memory management while parsing Enhanced Metafile (EMF/emf.x3d) files from untrusted sources, causing crashes and temporary unavailability (DoS). ZDI advisories also describe that crafted EMF data can lead to remote ...

CVE-2022-39804

CVE-2022-39804 affects SAP 3D Visual Enterprise Author (v9) via parsing of SLDPRT files, where CoreCadTranslator.exe may mishandle memory, enabling stack-based overflow or pointer reuse that can overwrite memory space. Connected advisories (ZDI-22-1539/1588) describe remote code execution with us...