Remote Code Execution Vulnerability in SAP 3D Visual Enterprise Author
CVE-2022-39805
7.8HIGH
What is CVE-2022-39805?
A vulnerability exists in SAP 3D Visual Enterprise Author – version 9 due to inadequate memory management. When a user opens a specially crafted Computer Graphics Metafile (.cgm) file from untrusted sources, it can trigger remote code execution. This occurs when the payload induces a stack-based overflow or attempts to reuse a dangling pointer that references overwritten memory, potentially compromising the system's integrity.
Affected Version(s)
SAP 3D Visual Enterprise Author 9