CVE-2022-41172

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Author version 9

Description The issue arises due to improper memory management. When a manipulated AutoCAD (.dxf) file from untrusted sources is opened, it can trigger a Remote Code Execution. This occurs when the payload forces a stack-based overflow or re-uses a dangling pointer referring to overwritten memory space.

Recommendations For SAP 3D Visual Enterprise Author version 9, avoid opening .dxf files from untrusted sources until a fix is available. As a temporary workaround, consider restricting the use of the TeighaTranslator.exe component to minimize the risk of exploitation.