PT-2022-25727 · Sap · Sap Commerce

Name of the Vulnerable Software and Affected Versions: SAP Commerce versions 1905 through 2205 Description: An attacker can change the content of the SAP Commerce login page through a manipulated URL, allowing them to inject code that redirects submissions from the affected login form to their ow...

PT-2022-25695 · Autodesk +1 · Autocad +1

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Author version 9 Description: The issue arises due to improper memory management. When a manipulated AutoCAD .dxf file from untrusted sources is opened, it can trigger a Remote Code Execution. This occurs when the...

CVE-2022-41199

Due to lack of proper memory management, when a victim opens a manipulated Open Inventor File .iv, vrml.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow ...

SAP 3D Visual Enterprise Author 缓冲区错误漏洞

SAP 3D Visual Enterprise Author is a desktop application from SAP Germany for managing 2D, 3D, animation, video and audio assets. SAP 3D Visual Enterprise Author suffers from a buffer overflow vulnerability that stems from a lack of proper memory management and can be exploited by attackers to Th...

SAP 3D Visual Enterprise Viewer 缓冲区错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, Germany. The software supports the publishing of 2D and 3D scenes in all industry-standard desktop applications and supports separate installation as a stand-alone executable program and ActiveX space. A buffer overflow vulnerability...

PT-2022-25723 · Sap · Sap 3D Visual Enterprise Viewer

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Viewer version 9 Description: The issue arises due to improper memory management. When a victim opens a manipulated Scalable Vector Graphic .svg, .svg.x3d file from untrusted sources, it can trigger a Remote Code...

SAP 3D Visual Enterprise Author 缓冲区错误漏洞

SAP 3D Visual Enterprise Author is a desktop application for managing 2D, 3D, animation, video and audio assets from SAP. A buffer error vulnerability exists in SAP 3D Visual Enterprise Author version 9, which stems from a lack of proper memory management, and can be exploited by an attacker to...

PT-2022-25003 · Sap +1 · Sap 3D Visual Enterprise Author +1

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Author version 9 Description: The issue arises due to improper memory management. When a victim opens a manipulated SolidWorks Drawing .slddrw file in SAP 3D Visual Enterprise Author, it can trigger a Remote Code...

SAP 3D Visual Enterprise Viewer 缓冲区错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, Germany. The software supports the publishing of 2D and 3D scenes in all industry-standard desktop applications and supports separate installation as a stand-alone executable program and ActiveX space. A buffer overflow vulnerability...

SAP Customer Data Cloud 安全特征问题漏洞

SAP Customer Data Cloud is a tool from SAP Germany that provides digital customer identity and access management. It enables companies to collect, aggregate and manage customer data across multiple touch points and applications. A security feature issue vulnerability exists in SAP Customer Data...

CVE-2022-41179

SAP 3D Visual Enterprise Author (v9) is affected by CVE-2022-41179 due to a parsing flaw in JT files (.jt, JtTranslator.exe). The issue can trigger remote code execution via a crafted JT payload that causes a write past the end of an allocated buffer (out-of-bounds write) or a reuse of a dangling...

CVE-2022-41188

The CVE-2022-41188 entry concerns SAP 3D Visual Enterprise Viewer prior to version 9.0, where improper memory management during parsing of Wavefront OBJ files (ObjTranslator.exe) received from untrusted sources can crash the application. Connected sources corroborate a vulnerability in OBJ parsin...

CVE-2022-41194

The CVE-2022-41194 entry describes a denial-of-service issue in SAP 3D Visual Enterprise Viewer (version 9) caused by improper memory management when processing manipulated Encapsulated PostScript (.eps, ai.x3d) files from untrusted sources. The vulnerability can cause the application to crash an...

CVE-2022-41200

SAP 3D Visual Enterprise Viewer (version 9) is affected by CVE-2022-41200 due to improper memory management when parsing manipulated SVG/.svg.x3d files from untrusted sources, enabling Remote Code Execution via a stack-based overflow or re-use of a dangling pointer to overwritten memory. The issu...

CVE-2022-41201

CVE-2022-41201 affects SAP 3D Visual Enterprise Viewer (version 9) and targets the processing of Right Hemisphere Binary (.rh, rh.x3d) files. The root cause is improper memory management, leading to a stack-based overflow or reuse of a dangling pointer to overwritten memory, enabling Remote Code ...

CVE-2022-41182

SAP 3D Visual Enterprise Author (v9) is affected by a memory-management issue in parsing Parasolid X_B files, particularly in CoreCadTranslator.exe, which can cause the application to crash and become temporarily unavailable (local issue). Some connected advisories also describe related informati...

CVE-2022-41171

SAP 3D Visual Enterprise Author, v9, is affected by a vulnerability in parsing CATIA4 MODEL files (.model) via CatiaTranslator.exe. The issue stems from improper memory management when handling manipulated MODEL data, potentially causing the application to crash or become temporarily unavailable;...

CVE-2022-41199

CVE-2022-41199 affects SAP 3D Visual Enterprise Viewer (v9) through parsing of Open Inventor File formats (.iv, vrml.x3d). The root cause is improper memory management in the IV file parser, allowing a stack-based buffer overflow or re-use of dangling pointers, which can lead to Remote Code Execu...

CVE-2022-41187

SAP 3D Visual Enterprise Viewer (version 9) contains a memory-management flaw in OBJ file parsing (ObjTranslator.exe). A crafted .obj file can trigger remote code execution via stack-based overflow or reuse of a dangling pointer. Remediation details are not explicit in the provided CVE data; a PT...

CVE-2022-41186

CVE-2022-41186 covers a buffer/memory‑management vulnerability in SAP 3D Visual Enterprise Viewer 9 involving CGM parsing (CgmCore.dll). A crafted CGM file from an untrusted source can trigger remote code execution via a write past the end of an allocated buffer or by reusing a dangling pointer t...