SAP 3D Visual Enterprise Viewer .dxf buffer overflow vulnerability

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP (Germany). The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces.SAP 3D Visual Enterprise Viewer versions prior to 9.0 suffer from a buffer overflow vulnerability, which stems from a lack of proper memory management and can be exploited by attackers via specially crafted files (.dxf, TeighaTranslator.exe ) to remotely execute code when the payload forces a stack-based overflow or reuses a dangling pointer to an overwritten space in memory.