Remote Code Execution Vulnerability in SAP 3D Visual Enterprise Author

CVE-2022-41170

What is CVE-2022-41170?

A vulnerability has been identified in SAP 3D Visual Enterprise Author, specifically in version 9, where improper memory management can be exploited. If a user opens a specially crafted CATIA4 Part (.model) file from untrusted sources using the CatiaTranslator.exe, it may result in remote code execution. This occurs due to a stack-based overflow or the reuse of a dangling pointer, leading to memory being overwritten. Users are advised to ensure they use trusted files and keep their software up to date to mitigate potential threats.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References