Remote Code Execution Vulnerability in SAP 3D Visual Enterprise Author
CVE-2022-39804
7.8HIGH
What is CVE-2022-39804?
A vulnerability exists in SAP 3D Visual Enterprise Author, where improper memory management can allow for Remote Code Execution. When a user opens a manipulated SolidWorks Part file (.sldprt) via CoreCadTranslator.exe, malicious payloads may exploit this flaw. Specifically, a stack-based overflow or the re-use of a dangling pointer can result in the execution of arbitrary code, compromising the security of the system if the file originates from untrusted sources.
Affected Version(s)
SAP 3D Visual Enterprise Author 9