CVE-2022-41167

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Author version 9

Description The issue arises due to inadequate memory management. When a manipulated AutoCAD (.dwg) file from untrusted sources is opened in SAP 3D Visual Enterprise Author, it can trigger Remote Code Execution. This occurs when the payload forces a stack-based overflow or reuses a dangling pointer referring to overwritten memory space.

Recommendations For SAP 3D Visual Enterprise Author version 9, consider avoiding the use of TeighaTranslator.exe for parsing .dwg files until a patch is available. As a temporary workaround, restrict the opening of .dwg files from untrusted sources to minimize the risk of exploitation.