Remote Code Execution Vulnerability in SAP 3D Visual Enterprise Author

CVE-2022-41172

Summary

In SAP 3D Visual Enterprise Author version 9, a vulnerability arises from insufficient memory management when handling AutoCAD (.dxf) files. If a user opens a specially crafted file from an untrusted source, it can result in unintended behavior, potentially allowing an attacker to execute arbitrary code. This occurs through a stack-based overflow or a misuse of a dangling pointer that references corrupted memory. Users should exercise caution when processing files from unknown origins.

References