CVE-2022-41201

Due to lack of proper memory management, when a victim opens a manipulated Right Hemisphere Binary .rh, rh.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overfl...

CVE-2022-41199

Due to lack of proper memory management, when a victim opens a manipulated Open Inventor File .iv, vrml.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow ...

SAP 3D Visual Enterprise Viewer 缓冲区错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, Germany. The software supports the publishing of 2D and 3D scenes in all industry-standard desktop applications and supports separate installation as a stand-alone executable program and ActiveX space. A buffer overflow vulnerability...

SAP 3D Visual Enterprise Viewer 缓冲区错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, Germany. The software supports the publishing of 2D and 3D scenes in all industry-standard desktop applications and supports separate installation as a stand-alone executable program and ActiveX space. A denial of service vulnerability...

SAP 3D Visual Enterprise Viewer 缓冲区错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, Germany. The software supports the publishing of 2D and 3D scenes in all industry-standard desktop applications and supports separate installation as a stand-alone executable program and ActiveX space. A buffer overflow vulnerability...

CVE-2022-41186

CVE-2022-41186 covers a buffer/memory‑management vulnerability in SAP 3D Visual Enterprise Viewer 9 involving CGM parsing (CgmCore.dll). A crafted CGM file from an untrusted source can trigger remote code execution via a write past the end of an allocated buffer or by reusing a dangling pointer t...

CVE-2022-41191

Due to lack of proper memory management, when a victim opens a manipulated Jupiter Tesselation .jt, JTReader.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based...

CVE-2022-41191

Due to lack of proper memory management, when a victim opens a manipulated Jupiter Tesselation .jt, JTReader.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based...

CVE-2022-41198

Due to lack of proper memory management, when a victim opens a manipulated SketchUp .skp, SketchUp.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a...

CVE-2022-41187

SAP 3D Visual Enterprise Viewer (version 9) contains a memory-management flaw in OBJ file parsing (ObjTranslator.exe). A crafted .obj file can trigger remote code execution via stack-based overflow or reuse of a dangling pointer. Remediation details are not explicit in the provided CVE data; a PT...

CVE-2022-41199

CVE-2022-41199 affects SAP 3D Visual Enterprise Viewer (v9) through parsing of Open Inventor File formats (.iv, vrml.x3d). The root cause is improper memory management in the IV file parser, allowing a stack-based buffer overflow or re-use of dangling pointers, which can lead to Remote Code Execu...

CVE-2022-41194

The CVE-2022-41194 entry describes a denial-of-service issue in SAP 3D Visual Enterprise Viewer (version 9) caused by improper memory management when processing manipulated Encapsulated PostScript (.eps, ai.x3d) files from untrusted sources. The vulnerability can cause the application to crash an...

CVE-2022-41188

The CVE-2022-41188 entry concerns SAP 3D Visual Enterprise Viewer prior to version 9.0, where improper memory management during parsing of Wavefront OBJ files (ObjTranslator.exe) received from untrusted sources can crash the application. Connected sources corroborate a vulnerability in OBJ parsin...

CVE-2022-41201

CVE-2022-41201 affects SAP 3D Visual Enterprise Viewer (version 9) and targets the processing of Right Hemisphere Binary (.rh, rh.x3d) files. The root cause is improper memory management, leading to a stack-based overflow or reuse of a dangling pointer to overwritten memory, enabling Remote Code ...

PT-2022-25723 · Sap · Sap 3D Visual Enterprise Viewer

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Viewer version 9 Description: The issue arises due to improper memory management. When a victim opens a manipulated Scalable Vector Graphic .svg, .svg.x3d file from untrusted sources, it can trigger a Remote Code...

CVE-2022-41195

SAP 3D Visual Enterprise Viewer (version 9) is affected by CVE-2022-41195 due to memory management flaws that can cause remote code execution when a manipulated IFF/2d.x3d file is opened. The vulnerability is described as a stack-based overflow or re-use of a dangling pointer referencing overwrit...

CVE-2022-41200

SAP 3D Visual Enterprise Viewer (version 9) is affected by CVE-2022-41200 due to improper memory management when parsing manipulated SVG/.svg.x3d files from untrusted sources, enabling Remote Code Execution via a stack-based overflow or re-use of a dangling pointer to overwritten memory. The issu...

CVE-2022-41188

Due to lack of proper memory management, when a victim opens manipulated Wavefront Object .obj, ObjTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until...

CVE-2022-41197

Due to lack of proper memory management, when a victim opens a manipulated VRML Worlds .wrl, vrml.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of t...

CVE-2022-41190

Due to lack of proper memory management, when a victim opens a manipulated AutoCAD .dxf, TeighaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflo...