Advisory
SAP takes the security of its vast product portfolio very seriously and thus releases security fixes for
vulnerabilities reported by external researchers and their customers every second Tuesday of the month.
SAP Note 3245929
was released on
11.10.2022 and deals with
"[Multiple CVEs] Multiple vulnerabilities in SAP 3D Visual Enterprise Author" within SAP 3D Visual Enterprise .
We advice you to follow the instructions, to resolve
code injection denial of service (dos)
with a
high potential for exploitation
in component CA-VE-VEA.
According to SAP Security Advisory team a workaround does not exist. It is advisable to implement the correction as part of maintenance.
Risk specification
This SAP security note addresses several vulnerabilities identified in SAP 3D Visual Enterprise Viewer. SAP 3D Visual Enterprise Viewer does not properly validate inputs of certain file types allowing an unauthenticated user to open manipulated files received from untrusted sources resulting in the application to crash and becoming temporarily unavailable. The file format details along with their CVE relevant information can be found below: Arbitrary code execution: AutoCAD (.dwg, TeighaTranslator.exe) - CVE-2022-41167 AutoCAD (.dxf, TeighaTranslator.exe) - CVE-2022-41172 CATIA5 Part (.catpart, CatiaTranslator.exe) - CVE-2022-41168 Computer Graphics Metafile (.cgm, CgmTranslator.exe) - CVE-2022-39805 Windows Cursor File (.cur, ico.x3d) - CVE-2022-41184 Enhanced Metafile (.emf, emf.x3d) - CVE-2022-41175 Iges Part and Assembly (.igs, .iges, CoreCadTranslator.exe) - CVE-2022-41177 Jupiter Tesselation (.jt, JtTranslator.exe) - CVE-2022-41179 CATIA4 Part (.model, CatiaTranslator.exe) - CVE-2022-41170 Wavefront Object (.obj, ObjTranslator.exe) - CVE-2022-39808 Portable Document Format (.pdf, PDFPublishing.dll) - CVE-2022-41180 SolidWorks Drawing (.slddrw, CoreCadTranslator.exe) - CVE-2022-39806 SolidWorks Part (.sldprt, CoreCadTranslator.exe) - CVE-2022-39804 ACIS Part and Assembly (.sat, CoreCadTranslator.exe) - CVE-2022-39803 Visual Design Stream (.vds, MataiPersistence.dll) - CVE-2022-41185 Denial of service: Windows Cursor File (.cur, ico.x3d) - CVE-2022-41183 CATIA4 Part (.model, CatiaTranslator.exe) - CVE-2022-41171 SolidWorks Assembly (.sldasm, CoreCadTranslator.exe) - CVE-2022-39807 Wavefront Object (.obj, ObjTranslator.exe) - CVE-2022-41166 CATIA5 Part (.catpart, CatiaTranslator.exe) - CVE-2022-41169 AutoCAD (.dxf, TeighaTranslator.exe) - CVE-2022-41173 Enhanced Metafile (.emf, emf.x3d) - CVE-2022-41176 Right Hemisphere Material (.rhm, rh.x3d) - CVE-2022-41174 Iges Part and Assembly (.igs, .iges, CoreCadTranslator.exe) - CVE-2022-41178 Portable Document Format (.pdf, PDFPublishing.dll) - CVE-2022-41181 Parasolid Part and Assembly (.x_b, CoreCadTranslator.exe) - CVE-2022-41182Solution
SAP 3D Visual Enterprise Viewer now properly validates the input files.
