CVE-2022-41185

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Author version 9

Description The issue is caused by a lack of proper memory management. When a victim opens a manipulated Visual Design Stream (.vds, MataiPersistence.dll) file from untrusted sources, it can trigger a Remote Code Execution. This occurs when the payload forces a stack-based overflow or a re-use of a dangling pointer, which refers to overwritten space in memory.

Recommendations For SAP 3D Visual Enterprise Author version 9, avoid opening Visual Design Stream (.vds) files from untrusted sources until a patch is available. As a temporary workaround, consider restricting access to the MataiPersistence.dll file to minimize the risk of exploitation.