Input validation

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

Input validation

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

Input validation

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PLT file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

Input validation

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

Input validation

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

Input validation

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

Input validation

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6359

SAP 3D Visual Enterprise Viewer (version 9) is affected by a PLT file parsing issue. The root cause is insufficient validation of the length of user-supplied data copied to a stack buffer, enabling a stack-based buffer overflow. This can allow remote code execution when a user opens a crafted PLT...

CVE-2020-6359

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PLT file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6358

CVE-2020-6358 affects SAP 3D Visual Enterprise Viewer (version 9). Connected sources describe a vulnerability in the FBX file parsing path caused by improper input validation, leading to an out-of-bounds write that can crash the target process and, per ZDI, enable remote code execution. Exploitat...

CVE-2020-6360

SAP 3D Visual Enterprise Viewer (version 9) is affected by CVE-2020-6360 in the DIB file parsing code. The vulnerability stems from improper input validation that allows an out-of-bounds write, enabling remote code execution. Exploitation requires user interaction: an attacker must lure a user to...

CVE-2020-6355

The CVE-2020-6355 entry concerns SAP 3D Visual Enterprise Viewer (VEV), version 9. A vulnerability exists in the parsing of TGA files, specifically a stack-based buffer overflow during TGA file processing. This is caused by improper validation of input data. Exploitation can lead to remote code e...

CVE-2020-6361

CVE-2020-6361 affects SAP 3D Visual Enterprise Viewer (version 9) and stems from an error in the RLE file parser where improper input validation can cause a write past the end of an allocated buffer. This parsing flaw enables a remote attacker to potentially execute arbitrary code by abusing craf...

CVE-2020-6357

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated U3D file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6357

CVE-2020-6357 affects SAP 3D Visual Enterprise Viewer (version 9) via the U3D file parser. The issue is a vulnerability in input validation that can cause memory corruption when parsing manipulated U3D files from untrusted sources. Documents describe this as a potential remote code execution scen...

CVE-2020-6353

CVE-2020-6353 affects SAP 3D Visual Enterprise Viewer 9. The issue stems from improper input validation in SKP file parsing from untrusted sources, causing the application to crash and become temporarily unavailable (per SAP/NVD). ZDI specifies that the parsing flaw can lead to remote code execut...

CVE-2020-6353

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6356

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6354

CVE-2020-6354 affects SAP 3D Visual Enterprise Viewer (version 9). The issue is in the SKP file parser: crafted SKP files from untrusted sources can trigger a parsing fault due to improper input validation, causing the application to crash and become temporarily unavailable. According to ZDI, thi...

CVE-2020-6352

CVE-2020-6352 affects SAP 3D Visual Enterprise Viewer 9. The issue arises in FBX file parsing due to improper input validation, allowing crafted FBX files from untrusted sources to crash the application (and, per ZDI, enable remote code execution). Exploitation requires user interaction (e.g., op...