CVE-2020-6351

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FBX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6351

CVE-2020-6351 affects SAP 3D Visual Enterprise Viewer 9. The vulnerability lies in the FBX file parser where untrusted FBX files can be parsed after improper input validation, leading to a crash and, per ZDI, potential remote code execution via a crafted file. Exploitation requires user interacti...

CVE-2020-6349

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6349

SAP 3D Visual Enterprise Viewer (VEV) 9 is affected by a GIF file parsing vulnerability. The issue stems from improper validation in GIF parsing, leading to memory corruption. The ZDI advisory describes that an attacker can lure a user to open a crafted GIF file or malicious page, enabling remote...

CVE-2020-6347

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HDR file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6347

CVE-2020-6347 affects SAP 3D Visual Enterprise Viewer (version 9). The issue is in HDR file parsing where lack of proper validation leads to memory corruption, which in ZDI’s advisory is described as enabling remote code execution; the public sources also note that exploitation requires user inte...

CVE-2020-6350

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6350

SAP 3D Visual Enterprise Viewer is affected by CVE-2020-6350 via a BMP file parsing memory corruption flaw that can lead to remote code execution. The vulnerability requires user interaction (opening a malicious BMP/file or visiting a malicious page) and stems from improper validation of user-sup...

CVE-2020-6346

SAP 3D Visual Enterprise Viewer (VEV) 9 contains a BMP parsing flaw that leads to memory corruption and potential remote code execution. The root cause is improper input validation during BMP file parsing, with exploitation requiring user interaction (opening a malicious BMP). This vulnerability ...

CVE-2020-6348

CVE-2020-6348 affects SAP 3D Visual Enterprise Viewer (version 9). The issue is in GIF file parsing due to improper input validation, leading to memory corruption and crashing the application; ZDI notes potential remote code execution with user interaction. SAP advisory indicates a patch exists (...

CVE-2020-6345

CVE-2020-6345 affects SAP 3D Visual Enterprise Viewer (version 9). The issue lies in the parsing of TGA files, due to improper input validation, leading to an out-of-bounds read. This can allow a remote attacker to run code or crash the target when a user opens a crafted TGA file or visits a mali...

CVE-2020-6344

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6344

CVE-2020-6344 affects SAP 3D Visual Enterprise Viewer (version 9). The issue is due to improper input validation during PDF parsing, enabling processing of manipulated PDFs that can crash the application and render it temporarily unavailable; ZDI additionally describes a remote code execution pat...

CVE-2020-6329

CVE-2020-6329 concerns SAP 3D Visual Enterprise Viewer (v9). Connected document ZDI-20-1136 documents a remote code execution vulnerability in the SKP file parsing flow: an object existence check is missing during parsing inside the sandbox subprocess, enabling an attacker to cause arbitrary code...

CVE-2020-6330

CVE-2020-6330 affects SAP 3D Visual Enterprise Viewer (v9) via the 3DM file parsing in the Rhino plugin. The issue stems from improper input validation, enabling manipulation of 3DM files to crash the application or potentially allow code execution. The ZDI advisory describes an out-of-bounds rea...

CVE-2020-6330

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6327

SAP 3D Visual Enterprise Viewer (version 9) is affected via the 3DM file parser. The connected documents describe a vulnerability in parsing 3DM files where improper input handling can trigger an integer overflow during memory writes, enabling remote code execution. Exploitation requires user int...

CVE-2020-6327

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6331

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6328

SAP 3D Visual Enterprise Viewer 9 is affected by a CGM file parsing vulnerability arising from improper input validation. The issue allows a user to open a manipulated CGM file from untrusted sources, with ZDI describing a remote code execution via untrusted pointer dereference during CGM parsing...