Due to lack of proper memory management, when a victim opens a manipulated Open Inventor File (.iv, vrml.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: sap

Published: 2022-10-11T00:00:00

Updated: 2024-08-03T12:35:49.520Z

Reserved: 2022-09-21T00:00:00

Link: CVE-2022-41199

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-10-11T21:15:25.923

Modified: 2024-11-21T07:22:48.540

Link: CVE-2022-41199

cve-icon Redhat

No data.