CVE-2021-21450

CVE-2021-21450 affects SAP 3D Visual Enterprise Viewer (version 9). The issue resides in PSD file parsing, where lack of proper validation leads to memory corruption, enabling remote code execution. Exploitation requires user interaction (e.g., opening a malicious PSD), and the attacker could run...

CVE-2021-21453

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21453

CVE-2021-21453 affects SAP 3D Visual Enterprise Viewer (version 9) via the RLE file parsing path. The issue is a memory corruption/vector in the RLE parsing code that can be triggered by opening a manipulated RLE file from untrusted sources, leading to remote code execution. The exploit requires ...

CVE-2021-21454

SAP 3D Visual Enterprise Viewer 9 is affected by a vulnerability in RLE file parsing. The issue stems from improper input validation that allows a crafted RLE file to trigger an out-of-bounds write, enabling remote code execution or a crash. Several sources (including ZDI-21-008) describe that ex...

CVE-2021-21454

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21464

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21464

Summary: CVE-2021-21464 affects SAP 3D Visual Enterprise Viewer (version 9). The root cause is improper input validation that allows a manipulated PCX file from an untrusted source to crash the application, causing temporary unavailability until restart. This vulnerability primarily impacts avail...

CVE-2021-21451

The CVE-2021-21451 entry affects SAP 3D Visual Enterprise Viewer (version 9). Connected advisories describe a parsing vulnerability in SGI file handling, caused by improper input validation leading to memory corruption. This can allow remote code execution with user interaction (e.g., opening a m...

CVE-2021-21451

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SGI file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21455

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21455

SAP 3D Visual Enterprise Viewer (version 9) is affected by a DIB file parsing vulnerability that leads to a heap-based buffer overflow and remote code execution. The issue arises from improper/length validation when parsing DIB data, enabling an attacker to run arbitrary code in the context of th...

CVE-2021-21452

SAP 3D Visual Enterprise Viewer (version 9) contains a GIF parsing vulnerability that causes memory corruption/input validation failure, leading to crashes and, per ZDI, remote code execution. The issue stems from improper handling of user-supplied GIF data during parsing, enabling exploitation a...

CVE-2021-21452

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21460

SAP 3D Visual Enterprise Viewer 9 is affected by CVE-2021-21460 due to a DIB file parsing flaw. The vulnerability is a heap-based buffer overflow in the DIB parsing code that can be triggered by processing manipulated DIB files from untrusted sources, leading to remote code execution (as describe...

CVE-2021-21460

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21459

SAP 3D Visual Enterprise Viewer (v9) is affected by an IFF file parsing vulnerability caused by improper input validation. Multiple connected sources (ZDI, Red Hat, CNVD, NVD) indicate the issue can crash the application and, in some entries, enable remote code execution when a manipulated IFF fi...

SAP 3D Visual Enterprise Viewer IFF File Parsing Memory Corruption Remote Code Execution Vulnerabililty

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

SAP 3D Visual Enterprise Viewer PCX File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

SAP 3D Visual Enterprise Viewer RLE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

SAP 3D Visual Enterprise Viewer GIF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...