CVE-2022-41169

Due to lack of proper memory management, when a victim opens manipulated CATIA5 Part .catpart, CatiaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until...

Microsoft Visual Studio Code 安全漏洞

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A security vulnerability exists in Microsoft Visual Studio Code. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the vendor announcement...

PT-2022-25693 · Dassault Systèmes +1 · Catia +1

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Author version 9 Description: The issue arises due to improper memory management. When a victim opens a manipulated CATIA4 Part .model, CatiaTranslator.exe file from untrusted sources, it can trigger Remote Code...

CVE-2022-41173

Due to lack of proper memory management, when a victim opens manipulated AutoCAD .dxf, TeighaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restar...

PT-2022-25703 · Sap · Pdfpublishing.Dll +1

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Author version 9 Description: The issue is caused by a lack of proper memory management. When a victim opens a manipulated Portable Document Format .pdf file received from untrusted sources, it is possible that a Remo...

CVE-2022-41042

CVE-2022-41042 is a Visual Studio Code information disclosure vulnerability. The CVE entry concerns Visual Studio Code and related tooling; the vulnerability is described as information disclosure with a CVSSv3.1 base score of 7.4 (HIGH), requiring user interaction and with network attack vector ...

CVE-2022-41185

CVE-2022-41185 affects SAP 3D Visual Enterprise Author v9. A memory management vulnerability allows remote code execution when a manipulated Visual Design Stream (.vds) file containing MataiPersistence.dll is opened from untrusted sources. The issue arises from a stack-based overflow or reuse of ...

CVE-2022-41172

CVE-2022-41172 affects SAP 3D Visual Enterprise Author (v9) and relates to the DXF file parsing code. The issue stems from improper memory management during parsing of DXF payloads (e.g., AutoCAD .dxf with TeighaTranslator.exe), potentially allowing Remote Code Execution via a stack-based overflo...

CVE-2022-41192

SAP 3D Visual Enterprise Viewer (before/around version 9) is affected by CVE-2022-41192 due to a memory-management flaw in parsing JT files (.jt, JTReader.x3d). Attackers can supply manipulated JT data to trigger a vulnerability that may crash the application and, per ZDI advisories, could allow ...

CVE-2022-41196

SAP 3D Visual Enterprise Viewer 9 is affected by a WRL/VRML.X3D parsing vulnerability caused by improper memory management, enabling Remote Code Execution (RCE) when a manipulated file is opened. Public details (ZDI advisories) state exploitation requires user interaction (e.g., opening a malicio...

CVE-2022-41177

Due to lack of proper memory management, when a victim opens a manipulated Iges Part and Assembly .igs, .iges, CoreCadTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload force...

CVE-2022-41176

SAP 3D Visual Enterprise Author (v9) is affected. The issue arises from improper memory management while parsing Enhanced Metafile (EMF/emf.x3d) files from untrusted sources, causing crashes and temporary unavailability (DoS). ZDI advisories also describe that crafted EMF data can lead to remote ...

CVE-2022-39804

CVE-2022-39804 affects SAP 3D Visual Enterprise Author (v9) via parsing of SLDPRT files, where CoreCadTranslator.exe may mishandle memory, enabling stack-based overflow or pointer reuse that can overwrite memory space. Connected advisories (ZDI-22-1539/1588) describe remote code execution with us...

KLA20005 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Visual Studio Code...

CVE-2022-39806

Summary of CVE-2022-39806 : The vulnerability affects SAP 3D Visual Enterprise Author (version 9) and specifically the parsing/handling of SolidWorks Drawing files (.slddrw) via CoreCadTranslator.exe. Root cause: improper memory management leading to a stack-based overflow or reuse of a dangling ...

PT-2022-25701 · Sap · Sap 3D Visual Enterprise Author

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Author version 9 Description: The issue arises due to improper memory management when handling manipulated IGES Part and Assembly files received from untrusted sources. This can cause the application to crash, becomin...

PT-2022-25696 · Sap · Sap 3D Visual Enterprise Author

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Author version 9 Description: The issue arises due to improper memory management when a user opens a manipulated AutoCAD .dxf file in SAP 3D Visual Enterprise Author. This can cause the application to crash, becoming...

PT-2022-25724 · Sap · Sap 3D Visual Enterprise Viewer

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Viewer version 9 Description: The issue is caused by a lack of proper memory management. When a victim opens a manipulated Right Hemisphere Binary .rh, .x3d file from untrusted sources, it can trigger a Remote Code...

CVE-2022-41182

Due to lack of proper memory management, when a victim opens manipulated Parasolid Part and Assembly .xb, CoreCadTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to t...

CVE-2022-41195

Due to lack of proper memory management, when a victim opens a manipulated EAAmiga Interchange File Format .iff, 2d.x3d file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-bas...