CVE-2021-42070

SAP 3D Visual Enterprise Viewer 9.0 is affected by an input-validation flaw in Jupiter Tessellation (JT) files, causing a crash and temporary unavailability when opening manipulated JT files from untrusted sources. Root cause identified as failure to validate JT inputs. SAP has issued security pa...

CVE-2021-42069

When a user opens manipulated Tagged Image File Format .tif file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2021-42069

CVE-2021-42069 affects SAP 3D Visual Enterprise Viewer 9.0. Public sources describe a parsing flaw in input files that can crash the application or lead to code execution. ZDI states a JT file parsing out-of-bounds write enabling remote code execution with user interaction required; other sources...

SAP 3D Visual Enterprise Viewer 输入验证错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, a German company. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications, and supports separate installations as standalone executables and ActiveX spaces.An input validation error vulnerability...

Autodesk Navisworks code issue vulnerability

Autodesk Navisworks is a 3D model review software for architecture, engineering and construction from Autodesk, Inc. A code issue vulnerability exists in Autodesk Navisworks, which can be exploited by attackers to execute code via a maliciously crafted DLL file...

Bentley Systems Bentley View 缓冲区错误漏洞

Bentley View is a free viewer from Bentley Systems, Inc. Bentley View is vulnerable to an out-of-bounds write vulnerability that stems from a boundary error when handling JT files. An attacker could exploit the vulnerability to create a specially crafted JT file and trick a victim into opening th...

CVE-2021-43279

An out-of-bounds write vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10. Crafted data in a U3D file can trigger a write past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute...

3D Printing and Engineering; an Overview

By Owais Sultan 3D Printing relies on tools such as 3D software to get the job done. One might wonder, how does everything work here? This is a post from HackRead.com Read the original post: 3D Printing and Engineering; an Overview...

3d-pechat-spb.ru Improper Access Control vulnerability OBB-2260411

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-M539-J985-HCR8 Crash in `max_pool3d` when size argument is 0 or negative

Impact The Keras pooling layers can trigger a segfault if the size of the pool is 0 or if a dimension is negative: python import tensorflow as tf poolsize = 2, 2, 0 layer = tf.keras.layers.MaxPooling3Dstrides=1, poolsize=poolsize inputtensor = tf.random.uniform3, 4, 10, 11, 12, dtype=tf.float32 r...

[updated] Patch now! Microsoft plugs actively exploited zero-days and other updates

On what might seem a relatively calm Patch Tuesday with 55 vulnerabilities being patched, the fact that six of them were rated “Critical” and two of them actively exploited spoils the Zen factor somewhat. Publicly disclosed computer security flaws are listed in the Common Vulnerabilities and...

Microsoft Issues Patches for Actively Exploited Excel, Exchange Server 0-Day Bugs

Microsoft has released security updates as part of its monthly Patch Tuesday release cycle to address 55 vulnerabilities across Windows, Azure, Visual Studio, Windows Hyper-V, and Office, including fixes for two actively exploited zero-day flaws in Excel and Exchange Server that could be abused t...

Remote code execution

3D Viewer Remote Code Execution Vulnerability...

Remote code execution

3D Viewer Remote Code Execution Vulnerability...

CVE-2021-43209 3D Viewer Remote Code Execution Vulnerability

...

CVE-2021-43209

CVE-2021-43209 is a Microsoft 3D Viewer remote code execution vulnerability. The connected sources confirm two related 3D Viewer issues and state that updates patch the flaws; specifically, app package versions 7.2107.7012.0 and later contain the fix. The CVE is rated High (CVSSv3.1: 7.8) with lo...

CVE-2021-43208 3D Viewer Remote Code Execution Vulnerability

...

CVE-2021-43208 3D Viewer Remote Code Execution Vulnerability

...

CVE-2021-43208

CVE-2021-43208 is a Microsoft 3D Viewer remote code execution vulnerability. Connected sources indicate two important RCE issues in the 3D Viewer that were patched in a Microsoft update, with affected App package versions prior to 7.2107.7012.0 and updates included in the November 2021 Patch Tues...

Microsoft 3D Viewer remote code execution vulnerability

A code injection vulnerability exists in Microsoft 3D Viewer, a simplified and fast graphics editing application from Microsoft Corporation USA. The vulnerability stems from the process of constructing code segments from external input data that is not properly filtered by the network system or...