Remote Code Execution Vulnerability in SAP 3D Visual Enterprise Author

CVE-2022-39804

What is CVE-2022-39804?

A vulnerability exists in SAP 3D Visual Enterprise Author, where improper memory management can allow for Remote Code Execution. When a user opens a manipulated SolidWorks Part file (.sldprt) via CoreCadTranslator.exe, malicious payloads may exploit this flaw. Specifically, a stack-based overflow or the re-use of a dangling pointer can result in the execution of arbitrary code, compromising the security of the system if the file originates from untrusted sources.

References