CVE-2022-41187
published 2022-10-11CVE-2022-41187: Due to lack of proper memory management, when a victim opens a manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sources in…
PriorityP338high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.64%
50.4th percentile
Due to lack of proper memory management, when a victim opens a manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sap | 3d_visual_enterprise_viewer | < 9.0 | 9.0 |
| sap_se | sap_3d_visual_enterprise_viewer | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
SAP 3D Visual Enterprise Author 9 OBJ File ObjTranslator.exe memory corruption (EUVD-2022-44428)
vuldb·2026-07-30·CVSS 7.8
CVE-2022-41187 [HIGH] SAP 3D Visual Enterprise Author 9 OBJ File ObjTranslator.exe memory corruption (EUVD-2022-44428)
A vulnerability marked as critical has been reported in SAP 3D Visual Enterprise Author 9. This vulnerability affects unknown code of the file ObjTranslator.exe of the component OBJ File Handler. This manipulation causes memory corruption.
This vulnerability is tracked as CVE-2022-41187. The attack is possible to be carried out remotely. No exploit exists.
It is suggested to install a patch to address this issue.
GHSA
GHSA-v8r9-432h-cr72: Due to lack of proper memory management, when a victim opens a manipulated Wavefront Object (
ghsa_unreviewed·2022-10-12
CVE-2022-41187 [HIGH] CWE-119 GHSA-v8r9-432h-cr72: Due to lack of proper memory management, when a victim opens a manipulated Wavefront Object (
Due to lack of proper memory management, when a victim opens a manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-10-11
Published