CVE-2022-41184
Assigner: sap
Published: 2022-10-11T00:00:00
State: PUBLISHED
affected: defaultStatus: unaffected
product: SAP 3D Visual Enterprise Author
vendor: SAP SE
versions: status: affected
version: 9
descriptions: supportingMedia: base64: no
type: text/html
value: <p>Due to lack of proper memory management, when a victim opens a manipulated Windows Cursor File (.cur, ico.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.</p>
value: Due to lack of proper memory management, when a victim opens a manipulated Windows Cursor File (.cur, ico.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.


problemTypes: descriptions: cweId: CWE-119
description: CWE-119
type: CWE
descriptions: cweId: CWE-787
description: CWE-787 Out-of-bounds Write
type: CWE
source: discovery: UNKNOWN
x_generator: engine: Vulnogram 0.1.0-dev