Remote Code Execution Vulnerability in SAP 3D Visual Enterprise Author

CVE-2022-41170

Summary

A vulnerability has been identified in SAP 3D Visual Enterprise Author, specifically in version 9, where improper memory management can be exploited. If a user opens a specially crafted CATIA4 Part (.model) file from untrusted sources using the CatiaTranslator.exe, it may result in remote code execution. This occurs due to a stack-based overflow or the reuse of a dangling pointer, leading to memory being overwritten. Users are advised to ensure they use trusted files and keep their software up to date to mitigate potential threats.

References