CVE-2020-6328

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated CGM file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6321

SAP 3D Visual Enterprise Viewer (v9) is affected by CVE-2020-6321 via the U3D file parsing in the 3difr plugin. The vulnerability stems from an uninitialized pointer in the parser, enabling remote code execution when a user opens a crafted U3D file or visits a malicious page, with user interactio...

CVE-2020-6322

SAP 3D Visual Enterprise Viewer (version 9) contains a vulnerability in the 3DM/U3D file parsing within the Rhino plugin that allows remote attackers to cause a crash or execute arbitrary code via a crafted 3DM/U3D file. The irreducible root cause is improper input validation leading to an out-of...

CVE-2020-6340

SAP 3D Visual Enterprise Viewer 9 is affected by a PCX file parsing vulnerability. The issue is an out-of-bounds write during PCX parsing that allows remote code execution; exploitation requires user interaction (e.g., opening a malicious file). This is documented by ZDI-20-1154 and corroborated ...

CVE-2020-6340

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6343

SAP 3D Visual Enterprise Viewer 9 is affected by CVE-2020-6343 through an EPS file parsing vulnerability. The issue arises from improper validation during EPS parsing, enabling a crafted EPS file to cause an out-of-bounds write, with the ZDI advisory noting remote code execution possible after us...

CVE-2020-6342

SAP 3D Visual Enterprise Viewer 9 is affected by CVE-2020-6342 due to a parsing flaw in U3D file handling. The ZDI advisory (ZDI-20-1152) describes an out-of-bounds write in U3D parsing that can allow remote code execution, requiring user interaction (e.g., opening a malicious file or visiting a ...

CVE-2020-6339

SAP 3D Visual Enterprise Viewer 9 is affected by a BMP parsing vulnerability caused by improper input validation. The flaw resides in the BMP file handling and can crash the application (availability impact). In at least one connected source (ZDI), the issue is described as a heap-based buffer ov...

CVE-2020-6339

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6337

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HDR file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6337

CVE-2020-6337 affects SAP 3D Visual Enterprise Viewer (version 9). The issue is described as an HDR file parsing/input handling flaw caused by improper input validation, leading to a crash and temporary unavailability, with some sources noting potential memory corruption and remote code execution...

CVE-2020-6338

SAP 3D Visual Enterprise Viewer (version 9) is affected by CVE-2020-6338 due to improper input validation during RH file parsing. The vulnerability affects parsing RH files and can crash the application, causing temporary unavailability, with ZDI reporting a remote code execution possibility via ...

CVE-2020-6338

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RH file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6332

SAP 3D Visual Enterprise Viewer 9 is affected by CVE-2020-6332 due to improper input validation in the HPGL file parsing path. The HPGL plugin parsing manipulated HPGL files can cause the application to crash (availability impact) and, per ZDI, may enable remote code execution when a user opens a...

CVE-2020-6314

SAP 3D Visual Enterprise Viewer 9 contains an HPGL parsing vulnerability in the hpgl plugin caused by improper input validation. The flaw can allow an attacker to cause an application crash or, per ZDI, execute code remotely via a manipulated HPGL file, with exploitation requiring user interactio...

CVE-2020-6314

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6333

SAP 3D Visual Enterprise Viewer 9 is affected by CVE-2020-6333 due to an input validation flaw in HPGL file parsing. The vulnerability enables an out-of-bounds write when processing specially crafted HPGL/2D data, which can be exploited to execute code in the context of the affected process. Expl...

CVE-2020-6336

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6336

SAP 3D Visual Enterprise Viewer 9 is affected by CVE-2020-6336 via the PCX file parser. The vulnerability is an out-of-bounds write during PCX parsing, allowing remote code execution when a user opens a malicious PCX file. User interaction is required to exploit. No vendor patch details are provi...

CVE-2020-6341

CVE-2020-6341 : SAP 3D Visual Enterprise Viewer 9 contains an EPS file parsing vulnerability. The issue arises from improper validation leading to an out-of-bounds read, enabling arbitrary code execution when a user opens a malicious EPS file (remote code execution; requires user interaction). Af...