Remote Code Execution Vulnerability in SAP 3D Visual Enterprise Author by SAP

CVE-2022-41179

What is CVE-2022-41179?

A vulnerability exists in SAP 3D Visual Enterprise Author due to improper memory management. If a user opens a specially crafted Jupiter Tesselation file from an untrusted source, it can lead to remote code execution. This occurs when an attacker exploits a stack-based buffer overflow or a dangling pointer issue, resulting in the manipulation of memory space and potentially executing arbitrary code.

References