4335 matches found
Input validation
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...
Input validation
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...
Input validation
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...
Input validation
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...
Input validation
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...
CVE-2021-21463
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...
CVE-2021-21463
CVE-2021-21463 affects SAP 3D Visual Enterprise Viewer (version 9). Connected advisories document a PCX file parsing vulnerability: improper validation leads to an out-of-bounds read that can be leveraged to execute code in the context of the affected process. The ZDI advisory specifies that expl...
CVE-2021-21462
SAP 3D Visual Enterprise Viewer 9 contains a PCX file parsing flaw that enables an out-of-bounds write, leading to remote code execution. Exploitation described by ZDI requires user interaction (victim must open a malicious PCX or visit a malicious page); other sources note crash/unavailability. ...
CVE-2021-21462
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...
CVE-2021-21457
SAP 3D Visual Enterprise Viewer (version 9) is affected by CVE-2021-21457 through a vulnerable IFF file parsing path. The issue stems from improper input validation, enabling memory corruption that can crash the application and, per ZDI, allow remote code execution with user interaction required ...
CVE-2021-21457
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...
CVE-2021-21456
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...
CVE-2021-21456
SAP 3D Visual Enterprise Viewer (v9) is affected by a DIB file parsing vulnerability enabling out-of-bounds write and remote code execution. The root cause is improper validation of user-supplied data during DIB parsing, allowing an attacker to execute arbitrary code in the process context. Explo...
CVE-2021-21461
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...
CVE-2021-21461
The CVE-2021-21461 entry affects SAP 3D Visual Enterprise Viewer (version 9). The vulnerability lies in BMP file parsing due to improper input validation, enabling a remote attacker to cause an out-of-bounds write and, per ZDI, remote code execution when a user opens a malicious BMP file. Exploit...
CVE-2021-21449
SAP 3D Visual Enterprise Viewer (v9) is affected by an IFF file parsing vulnerability that causes memory corruption and can lead to remote code execution. The issue stems from improper validation during IFF parsing, and exploitation requires user interaction (e.g., opening a malicious file or vis...
CVE-2021-21449
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...
CVE-2021-21458
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...
CVE-2021-21458
CVE-2021-21458 affects SAP 3D Visual Enterprise Viewer, version 9. The issue arises in parsing IFF files due to improper input validation, causing memory corruption and a crash that can be leveraged for remote code execution. Exploitation requires user interaction (e.g., opening a malicious file ...
CVE-2021-21450
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...