Remote Code Execution Vulnerability in SAP 3D Visual Enterprise Viewer

CVE-2022-41193

What is CVE-2022-41193?

This vulnerability arises from improper memory management in SAP 3D Visual Enterprise Viewer, specifically when users open manipulated Encapsulated Post Script (.eps, .ai.x3d) files from untrusted sources. Attackers can exploit this flaw to trigger a remote code execution by manipulating stack-based overflow conditions or reusing a dangling pointer that references modified memory space, potentially allowing unauthorized actions within the affected system.

References