CVE-2022-41190

The CVE-2022-41190 entry concerns SAP 3D Visual Enterprise Viewer (up to version 9). The vulnerability arises from improper memory management while parsing DXF files (and related TeighaTranslator.exe usage) which can lead to memory corruption, including a stack-based overflow or reuse of a dangli...

CVE-2022-41178

SAP 3D Visual Enterprise Author (version 9) is affected by a vulnerability in IGES parsing (.igs/.iges, CoreCadTranslator.exe) caused by improper memory management. The result is crashes and temporary unavailability of the application; some sources describe a potential for remote code execution v...

CVE-2022-41184

CVE-2022-41184 affects SAP 3D Visual Enterprise Author v9, where parsing manipulated Windows Cursor Files (.cur, ico.x3d) can trigger a stack-based overflow or use-after-free of a dangling pointer, enabling Remote Code Execution after user opens the crafted file. Exploitation requires user intera...

CVE-2022-41168

SAP 3D Visual Enterprise Author (v9) is affected by CVE-2022-41168 through its CATIA CATPart parsing. The underlying issue is improper memory management that can trigger remote code execution when processing a manipulated CATPart file from untrusted sources. The documented causes include a stack-...

CVE-2022-41166

CVE-2022-41166 concerns SAP 3D Visual Enterprise Author (version 9). The issue arises when handling manipulated Wavefront OBJ files (.obj) via ObjTranslator.exe, caused by improper memory management in the OBJ parsing logic. This can cause the application to crash and become temporarily unavailab...

CVE-2022-41198

SAP 3D Visual Enterprise Viewer (version 9) is affected by a vulnerability in parsing SketchUp files (.skp, SketchUp.x3d) due to improper memory management. The issue can lead to Remote Code Execution when a crafted file forces either a stack-based overflow or a reuse of a dangling pointer to ove...

PT-2022-25711 · Sap · Sap 3D Visual Enterprise Viewer

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Viewer version 9 Description: The issue arises due to improper memory management. When a user opens a manipulated Wavefront Object .obj file in SAP 3D Visual Enterprise Viewer, the application can crash and become...

CVE-2022-39804

Due to lack of proper memory management, when a victim opens a manipulated SolidWorks Part .sldprt, CoreCadTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a...

CVE-2022-41202

CVE-2022-41202 affects SAP 3D Visual Enterprise Viewer (v9). The vulnerability stems from improper memory management during parsing of Visual Design Stream files (.vds, vds.x3d), allowing a stack-based overflow or reuse of a dangling pointer that leads to Remote Code Execution. Exploitation requi...

CVE-2022-41176

Due to lack of proper memory management, when a victim opens manipulated Enhanced Metafile .emf, emf.x3d file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart o...

CVE-2022-41197

SAP 3D Visual Enterprise Viewer (version 9) is affected by CVE-2022-41197 due to a memory-management flaw in parsing WRL/VRML files. The vulnerability allows an out-of-bounds read while handling manipulated WRL files, which in ZDI’s advisory can lead to remote code execution in the context of the...

SAP 3D Visual Enterprise Viewer 缓冲区错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, Germany. The software supports the publishing of 2D and 3D scenes in all industry-standard desktop applications and supports separate installation as a stand-alone executable program and ActiveX space. A buffer overflow vulnerability...

PT-2022-25003 · Sap +1 · Sap 3D Visual Enterprise Author +1

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Author version 9 Description: The issue arises due to improper memory management. When a victim opens a manipulated SolidWorks Drawing .slddrw file in SAP 3D Visual Enterprise Author, it can trigger a Remote Code...

PT-2022-25700 · Sap · Sap 3D Visual Enterprise Author

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Author version 9 Description: The issue arises due to improper memory management when handling manipulated Iges Part and Assembly files. This can lead to a Remote Code Execution when a payload forces a stack-based...

CVE-2022-41201

Due to lack of proper memory management, when a victim opens a manipulated Right Hemisphere Binary .rh, rh.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overfl...

CVE-2022-41170

Due to lack of proper memory management, when a victim opens a manipulated CATIA4 Part .model, CatiaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based...

PT-2022-25695 · Autodesk +1 · Autocad +1

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Author version 9 Description: The issue arises due to improper memory management. When a manipulated AutoCAD .dxf file from untrusted sources is opened, it can trigger a Remote Code Execution. This occurs when the...

PT-2022-25002 · Sap · Sap 3D Visual Enterprise Author

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Author version 9 Description: The issue arises due to improper memory management. When a victim opens a manipulated Computer Graphics Metafile .cgm file in SAP 3D Visual Enterprise Author, it can trigger a Remote Code...

PT-2022-25702 · Sap · Sap 3D Visual Enterprise Author

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Author version 9 Description: The issue arises due to improper memory management. When a victim opens a manipulated Jupiter Tesselation .jt, JtTranslator.exe file from untrusted sources, it can trigger Remote Code...

CVE-2022-41167

Due to lack of proper memory management, when a victim opens a manipulated AutoCAD .dwg, TeighaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflo...