CVE-2022-41193

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Viewer version 9

Description The issue arises due to improper memory management. When a victim opens a manipulated Encapsulated Post Script (.eps, ai.x3d) file from untrusted sources, it can trigger Remote Code Execution. This occurs when the payload forces a stack-based overflow or reuses a dangling pointer referring to overwritten space in memory.

Recommendations For SAP 3D Visual Enterprise Viewer version 9, consider avoiding the use of .eps and ai.x3d files from untrusted sources until a patch is available. As a temporary workaround, restrict the opening of such files in the viewer to minimize the risk of exploitation.