CVE-2022-39805: Buffer Overflow
Due to lack of proper memory management, when a victim opens a manipulated Computer Graphics Metafile (.cgm, CgmTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-39805?
CVE-2022-39805 is a vulnerability that allows remote code execution in SAP 3D Visual Enterprise Author version 9 due to lack of proper memory management when opening a manipulated Computer Graphics Metafile (.cgm) file received from untrusted sources.
What is the severity of CVE-2022-39805?
CVE-2022-39805 has a severity rating of 7.8 (High).
How does CVE-2022-39805 occur?
CVE-2022-39805 occurs due to a lack of proper memory management when opening manipulated .cgm files in SAP 3D Visual Enterprise Author version 9.
Which software is affected by CVE-2022-39805?
SAP 3D Visual Enterprise Author version 9 is affected by CVE-2022-39805.
How can remote code execution be triggered in CVE-2022-39805?
Remote code execution can be triggered in CVE-2022-39805 when a victim opens a manipulated .cgm file received from untrusted sources.