CVE-2022-41198

SAP 3D Visual Enterprise Viewer (version 9) is affected by a vulnerability in parsing SketchUp files (.skp, SketchUp.x3d) due to improper memory management. The issue can lead to Remote Code Execution when a crafted file forces either a stack-based overflow or a reuse of a dangling pointer to ove...

CVE-2022-41178

SAP 3D Visual Enterprise Author (version 9) is affected by a vulnerability in IGES parsing (.igs/.iges, CoreCadTranslator.exe) caused by improper memory management. The result is crashes and temporary unavailability of the application; some sources describe a potential for remote code execution v...

CVE-2022-41174

CVE-2022-41174 affects SAP 3D Visual Enterprise Author (version 9) and is caused by a lack of proper memory management that leads to a buffer overflow when opening manipulated Right Hemisphere Material (.rhm, rh.x3d) files from untrusted sources. This can cause the application to crash and become...

CVE-2022-41190

The CVE-2022-41190 entry concerns SAP 3D Visual Enterprise Viewer (up to version 9). The vulnerability arises from improper memory management while parsing DXF files (and related TeighaTranslator.exe usage) which can lead to memory corruption, including a stack-based overflow or reuse of a dangli...

CVE-2022-41168

SAP 3D Visual Enterprise Author (v9) is affected by CVE-2022-41168 through its CATIA CATPart parsing. The underlying issue is improper memory management that can trigger remote code execution when processing a manipulated CATPart file from untrusted sources. The documented causes include a stack-...

CVE-2022-41173

SAP 3D Visual Enterprise Author v9 is affected by CVE-2022-41173 through improper memory management when parsing manipulated DXF files (AutoCAD/DXF via TeighaTranslator.exe). The issue can cause the application to crash, making it temporarily unavailable, and some connected advisories describe po...

CVE-2022-41180

CVE-2022-41180 concerns SAP 3D Visual Enterprise Author. Multiple connected sources (ZDI advisories) confirm a vulnerability in the PDF parsing of PDFPublishing.dll that causes an out-of-bounds write when processing crafted PDF data. The underlying issue is a parsing/memory-management flaw in the...

CVE-2022-41196

Due to lack of proper memory management, when a victim opens a manipulated VRML Worlds .wrl, vrml.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a...

CVE-2022-41170

SAP 3D Visual Enterprise Author is affected by CVE-2022-41170 via the parsing of MODEL files in CATIA4 Part (.model, CatiaTranslator.exe). The vulnerability is described as a write past end of an allocated buffer (out-of-bounds write) in the MODEL parser, which can lead to remote code execution. ...

CVE-2022-41194

Due to lack of proper memory management, when a victim opens a manipulated Encapsulated Postscript .eps, ai.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until...

CVE-2022-41189

CVE-2022-41189 affects SAP 3D Visual Enterprise Viewer (version 9) and is triggered by parsing manipulated DWG files (AutoCAD/DWG with TeighaTranslator.exe) due to insufficient memory management. The vulnerability allows remote code execution via a stack-based overflow or reuse of a dangling poin...

CVE-2022-41193

SAP 3D Visual Enterprise Viewer 9 is affected by a memory-management vulnerability in EPS parsing (EPS/ai.x3d). The issue can trigger Remote Code Execution when a manipulated file from untrusted sources is opened, due to stack-based overflow or re-use of a dangling pointer. The vulnerability requ...

CVE-2022-39805

SAP 3D Visual Enterprise Author (v9) is affected by a memory-management vulnerability in CGM handling via CgmTranslator.exe. The issue, described across multiple sources, allows remote code execution when a crafted CGM file from an untrusted source is opened, potentially via a stack-based overflo...

CVE-2022-41202

CVE-2022-41202 affects SAP 3D Visual Enterprise Viewer (v9). The vulnerability stems from improper memory management during parsing of Visual Design Stream files (.vds, vds.x3d), allowing a stack-based overflow or reuse of a dangling pointer that leads to Remote Code Execution. Exploitation requi...

CVE-2022-41191

CVE-2022-41191 affects SAP 3D Visual Enterprise Viewer (version 9) via a vulnerability in parsing of Jupiter Tessellation JT files (JTReader.x3d). The rooted issue is a memory-management flaw that can enable remote code execution when a crafted .jt file causes a stack-based overflow or reuse of a...

CVE-2022-41169

CVE-2022-41169 affects SAP 3D Visual Enterprise Author v9. The vulnerability stems from improper memory management while parsing CATIA5 Part files (.catpart) via CatiaTranslator.exe, allowing a crash and temporary unavailability of the application when opening manipulated files from untrusted sou...

PT-2022-25711 · Sap · Sap 3D Visual Enterprise Viewer

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Viewer version 9 Description: The issue arises due to improper memory management. When a user opens a manipulated Wavefront Object .obj file in SAP 3D Visual Enterprise Viewer, the application can crash and become...

CVE-2022-41189

Due to lack of proper memory management, when a victim opens a manipulated AutoCAD .dwg, TeighaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflo...

CVE-2022-41178

Due to lack of proper memory management, when a victim opens manipulated Iges Part and Assembly .igs, .iges, CoreCadTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable t...

CVE-2022-41166

Due to lack of proper memory management, when a victim opens manipulated Wavefront Object .obj, ObjTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until...