Remote Code Execution Vulnerability in SAP 3D Visual Enterprise Viewer by SAP

CVE-2022-41187

What is CVE-2022-41187?

A flaw in SAP 3D Visual Enterprise Viewer allows attackers to exploit improper memory management when users open specially crafted Wavefront Object (.obj) files from untrusted sources. This could lead to a remote code execution scenario by triggering a stack-based overflow or reusing dangling pointers, allowing attackers to manipulate memory space. Users are advised to avoid opening OBJ files from unverified sources and keep their software updated to mitigate potential risks.

References