CVE-2022-41184: Buffer Overflow
Due to lack of proper memory management, when a victim opens a manipulated Windows Cursor File (.cur, ico.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-41184?
CVE-2022-41184 is a vulnerability that occurs due to lack of proper memory management in SAP 3D Visual Enterprise Author version 9, allowing for remote code execution.
How does CVE-2022-41184 work?
CVE-2022-41184 works by exploiting a stack-based overflow when a victim opens a manipulated Windows Cursor File received from untrusted sources in SAP 3D Visual Enterprise Author.
What is the severity of CVE-2022-41184?
CVE-2022-41184 is considered to have a high severity with a CVSS score of 7.8.
Which software versions are affected by CVE-2022-41184?
CVE-2022-41184 affects SAP 3D Visual Enterprise Author version 9.
How can CVE-2022-41184 be mitigated?
To mitigate CVE-2022-41184, it is recommended to update to a patched version of SAP 3D Visual Enterprise Author or apply the necessary security patches provided by SAP.