CVE-2022-41177

The CVE-2022-41177 issue affects SAP 3D Visual Enterprise Author (v9) where parsing of IGES/IGES-like files (.igs, .iges) can trigger memory corruption due to improper memory management. The vulnerability allows remote code execution when a victim opens a manipulated IGES file from untrusted sour...

CVE-2022-41192

SAP 3D Visual Enterprise Viewer (before/around version 9) is affected by CVE-2022-41192 due to a memory-management flaw in parsing JT files (.jt, JTReader.x3d). Attackers can supply manipulated JT data to trigger a vulnerability that may crash the application and, per ZDI advisories, could allow ...

CVE-2022-39808: Improper Restriction of Operations within the Bounds of a Memory Buffer

Due to lack of proper memory management, when a victim opens a manipulated Wavefront Object .obj, ObjTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based...

CVE-2022-41196

SAP 3D Visual Enterprise Viewer 9 is affected by a WRL/VRML.X3D parsing vulnerability caused by improper memory management, enabling Remote Code Execution (RCE) when a manipulated file is opened. Public details (ZDI advisories) state exploitation requires user interaction (e.g., opening a malicio...

CVE-2022-41193: Improper Restriction of Operations within the Bounds of a Memory Buffer

Due to lack of proper memory management, when a victim opens a manipulated Encapsulated Post Script .eps, ai.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based...

CVE-2022-41169: Improper Restriction of Operations within the Bounds of a Memory Buffer

Due to lack of proper memory management, when a victim opens manipulated CATIA5 Part .catpart, CatiaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until...

CVE-2022-41192: Improper Restriction of Operations within the Bounds of a Memory Buffer

Due to lack of proper memory management, when a victim opens manipulated Jupiter Tesselation .jt, JTReader.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until...

CVE-2022-41167

SAP 3D Visual Enterprise Author (v9) contains a DWG file parsing vulnerability in TeighaTranslator.exe that can lead to Remote Code Execution. The issue stems from parsing DWG data and can be triggered by crafted files, with two related variants described as use-after-free and buffer/stack overfl...

CVE-2022-41182

Due to lack of proper memory management, when a victim opens manipulated Parasolid Part and Assembly .xb, CoreCadTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to t...

SAP 3D Visual Enterprise Author 缓冲区错误漏洞

SAP 3D Visual Enterprise Author is a desktop application for managing 2D, 3D, animation, video and audio assets from SAP. A denial of service vulnerability exists in SAP 3D Visual Enterprise Author version 9, which stems from a lack of proper memory management and can be exploited by an attacker ...

PT-2022-25700 · Sap · Sap 3D Visual Enterprise Author

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Author version 9 Description: The issue arises due to improper memory management when handling manipulated Iges Part and Assembly files. This can lead to a Remote Code Execution when a payload forces a stack-based...

CVE-2022-41174

Due to lack of proper memory management, when a victim opens manipulated Right Hemisphere Material .rhm, rh.x3d file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until...

PT-2022-25721 · Sap · Sap 3D Visual Enterprise Viewer

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Viewer version 9 Description: The issue is caused by a lack of proper memory management. When a victim opens a manipulated Open Inventor File .iv, vrml.x3d received from untrusted sources, it is possible that a Remote...

CVE-2022-41180

CVE-2022-41180 concerns SAP 3D Visual Enterprise Author. Multiple connected sources (ZDI advisories) confirm a vulnerability in the PDF parsing of PDFPublishing.dll that causes an out-of-bounds write when processing crafted PDF data. The underlying issue is a parsing/memory-management flaw in the...

PT-2022-25712 · Sap +1 · Sap 3D Visual Enterprise Viewer +1

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Viewer version 9 Description: The issue arises due to improper memory management. When a victim opens a manipulated AutoCAD .dwg file in SAP 3D Visual Enterprise Viewer, it can trigger Remote Code Execution. This occu...

CVE-2022-41197: Improper Restriction of Operations within the Bounds of a Memory Buffer

Due to lack of proper memory management, when a victim opens a manipulated VRML Worlds .wrl, vrml.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of t...

CVE-2022-41201: Improper Restriction of Operations within the Bounds of a Memory Buffer

Due to lack of proper memory management, when a victim opens a manipulated Right Hemisphere Binary .rh, rh.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overfl...

CVE-2022-41189: Improper Restriction of Operations within the Bounds of a Memory Buffer

Due to lack of proper memory management, when a victim opens a manipulated AutoCAD .dwg, TeighaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflo...

PT-2022-25697

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Author version 9 Description The issue arises due to improper memory management. When a user opens a manipulated Right Hemisphere Material .rhm, .x3d file from an untrusted source, the application can crash and become...

CVE-2022-41194: Improper Restriction of Operations within the Bounds of a Memory Buffer

Due to lack of proper memory management, when a victim opens a manipulated Encapsulated Postscript .eps, ai.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until...