Due to lack of proper memory management, when a victim opens a manipulated Visual Design Stream (.vds, vds.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: sap

Published: 2022-10-11T00:00:00

Updated: 2024-08-03T12:35:49.597Z

Reserved: 2022-09-21T00:00:00

Link: CVE-2022-41202

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-10-11T21:15:26.303

Modified: 2024-11-21T07:22:48.977

Link: CVE-2022-41202

cve-icon Redhat

No data.