CVE-2022-41187

Due to lack of proper memory management, when a victim opens a manipulated Wavefront Object .obj, ObjTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based...

PT-2022-25716 · Sap · Sap 3D Visual Enterprise Viewer

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Viewer version 9 Description: The issue arises due to improper memory management. When a victim opens a manipulated Encapsulated Post Script .eps, ai.x3d file from untrusted sources, it can trigger Remote Code...

CVE-2022-41191

CVE-2022-41191 affects SAP 3D Visual Enterprise Viewer (version 9) via a vulnerability in parsing of Jupiter Tessellation JT files (JTReader.x3d). The rooted issue is a memory-management flaw that can enable remote code execution when a crafted .jt file causes a stack-based overflow or reuse of a...

CVE-2022-41190

The CVE-2022-41190 entry concerns SAP 3D Visual Enterprise Viewer (up to version 9). The vulnerability arises from improper memory management while parsing DXF files (and related TeighaTranslator.exe usage) which can lead to memory corruption, including a stack-based overflow or reuse of a dangli...

CVE-2022-41198

SAP 3D Visual Enterprise Viewer (version 9) is affected by a vulnerability in parsing SketchUp files (.skp, SketchUp.x3d) due to improper memory management. The issue can lead to Remote Code Execution when a crafted file forces either a stack-based overflow or a reuse of a dangling pointer to ove...

CVE-2022-41193

SAP 3D Visual Enterprise Viewer 9 is affected by a memory-management vulnerability in EPS parsing (EPS/ai.x3d). The issue can trigger Remote Code Execution when a manipulated file from untrusted sources is opened, due to stack-based overflow or re-use of a dangling pointer. The vulnerability requ...

CVE-2022-41202

CVE-2022-41202 affects SAP 3D Visual Enterprise Viewer (v9). The vulnerability stems from improper memory management during parsing of Visual Design Stream files (.vds, vds.x3d), allowing a stack-based overflow or reuse of a dangling pointer that leads to Remote Code Execution. Exploitation requi...

CVE-2022-41189

CVE-2022-41189 affects SAP 3D Visual Enterprise Viewer (version 9) and is triggered by parsing manipulated DWG files (AutoCAD/DWG with TeighaTranslator.exe) due to insufficient memory management. The vulnerability allows remote code execution via a stack-based overflow or reuse of a dangling poin...

CVE-2022-41199

Due to lack of proper memory management, when a victim opens a manipulated Open Inventor File .iv, vrml.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow ...

SAP 3D Visual Enterprise Viewer 缓冲区错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, Germany. The software supports the publishing of 2D and 3D scenes in all industry-standard desktop applications and supports separate installation as a stand-alone executable program and ActiveX space. A buffer overflow vulnerability...

PT-2022-25715 · Sap · Sap 3D Visual Enterprise Viewer

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Viewer version 9 Description: The issue is caused by a lack of proper memory management. When a user opens a manipulated Jupiter Tesselation .jt, JTReader.x3d file from an untrusted source, the application can crash a...

CVE-2022-41186

CVE-2022-41186 covers a buffer/memory‑management vulnerability in SAP 3D Visual Enterprise Viewer 9 involving CGM parsing (CgmCore.dll). A crafted CGM file from an untrusted source can trigger remote code execution via a write past the end of an allocated buffer or by reusing a dangling pointer t...

SAP 3D Visual Enterprise Viewer 缓冲区错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, Germany. The software supports the publishing of 2D and 3D scenes in all industry-standard desktop applications and supports separate installation as a stand-alone executable program and ActiveX space. A buffer overflow vulnerability...

CVE-2022-41201

Due to lack of proper memory management, when a victim opens a manipulated Right Hemisphere Binary .rh, rh.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overfl...

SAP 3D Visual Enterprise Viewer 缓冲区错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, Germany. The software supports the publishing of 2D and 3D scenes in all industry-standard desktop applications and supports separate installation as a stand-alone executable program and ActiveX space. A buffer overflow vulnerability...

SAP 3D Visual Enterprise Viewer 缓冲区错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, Germany. The software supports the publishing of 2D and 3D scenes in all industry-standard desktop applications and supports separate installation as a stand-alone executable program and ActiveX space. A buffer overflow vulnerability...

SAP 3D Visual Enterprise Viewer 缓冲区错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, Germany. The software supports the publishing of 2D and 3D scenes in all industry-standard desktop applications and supports separate installation as a stand-alone executable program and ActiveX space. A denial of service vulnerability...

CVE-2022-41191

Due to lack of proper memory management, when a victim opens a manipulated Jupiter Tesselation .jt, JTReader.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based...

CVE-2022-41187

SAP 3D Visual Enterprise Viewer (version 9) contains a memory-management flaw in OBJ file parsing (ObjTranslator.exe). A crafted .obj file can trigger remote code execution via stack-based overflow or reuse of a dangling pointer. Remediation details are not explicit in the provided CVE data; a PT...

CVE-2022-41194

The CVE-2022-41194 entry describes a denial-of-service issue in SAP 3D Visual Enterprise Viewer (version 9) caused by improper memory management when processing manipulated Encapsulated PostScript (.eps, ai.x3d) files from untrusted sources. The vulnerability can cause the application to crash an...