Remote Code Execution Vulnerability in SAP 3D Visual Enterprise Author

CVE-2022-39803

Summary

A vulnerability exists in SAP 3D Visual Enterprise Author, version 9, where improper memory management may lead to remote code execution. This occurs when a user opens a specially crafted ACIS Part and Assembly (.sat) file, potentially received from untrusted sources. The manipulation can cause a stack-based overflow or the reuse of a dangling pointer, which refers to overwritten memory. This vulnerability underscores the importance of cautious handling of files from unknown origins.

References