Due to lack of proper memory management, when a victim opens a manipulated Windows Cursor File (.cur, ico.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: sap

Published: 2022-10-11T00:00:00

Updated: 2024-08-03T12:35:49.467Z

Reserved: 2022-09-21T00:00:00

Link: CVE-2022-41184

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-10-11T21:15:20.543

Modified: 2024-11-21T07:22:46.477

Link: CVE-2022-41184

cve-icon Redhat

No data.