CVE-2022-22539

When a user opens a manipulated JPEG file format .jpg, 2d.x3d received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE...

CVE-2022-22539

SAP 3D Visual Enterprise Viewer 9.0 is affected by CVE-2022-22539 via crafted JPEG parsing. The published ZDI advisory describes an out-of-bounds write in JPG parsing that can allow remote code execution when a user opens a manipulated JPEG (requires user interaction). In the SAP NVD entry, the i...

CVE-2022-22538

SAP 3D Visual Enterprise Viewer 9.0 is affected by CVE-2022-22538 through AI file parsing. The vulnerability is an out-of-bounds/write condition in the AI parsing code that can allow remote code execution. Exploitation requires a user to open a malicious AI/.ai.x3d file (user interaction), potent...

CVE-2022-22538

When a user opens a manipulated Adobe Illustrator file format .ai, ai.x3d received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with...

CVE-2022-22537

CVE-2022-22537 affects SAP 3D Visual Enterprise Viewer (v9.0) and is triggered by opening manipulated TIFF/2d.x3d files from untrusted sources, causing the application to crash and become temporarily unavailable until restart. Connected sources confirm the affected product/version and describe th...

CVE-2022-22537

When a user opens a manipulated Tagged Image File Format .tiff, 2d.x3d received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with the...

PT-2022-15508 · Sap · Sap 3D Visual Enterprise Viewer

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Viewer version 9.0 Description: The issue occurs when a user opens a manipulated JPEG file format received from untrusted sources, causing the application to crash and become temporarily unavailable until restart...

CVE-2022-22538: Improper Input Validation

When a user opens a manipulated Adobe Illustrator file format .ai, ai.x3d received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with...

CVE-2022-22539: Improper Input Validation

When a user opens a manipulated JPEG file format .jpg, 2d.x3d received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE...

CVE-2022-22537: Improper Input Validation

When a user opens a manipulated Tagged Image File Format .tiff, 2d.x3d received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with the...

Siemens Teamcenter Visualization Out-of-Bounds Writing Vulnerability (CNVD-2022-10022)

An out-of-bounds write vulnerability exists in Siemens Teamcenter Visualization, which provides team collaboration capabilities for designing 2D and 3D scenes, and can be exploited by attackers to execute code in the context of the current process...

SAP 3D Visual Enterprise Viewer input validation error vulnerability

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, Germany. The software supports publishing of 2D and 3D scenes in all industry-standard desktop applications and supports separate installations with standalone executables and ActiveX space. An input validation error vulnerability exis...

Siemens Teamcenter Visualization and Solid Edge Out-of-Bounds Reading Vulnerability

Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. Siemens Solid Edge is a 3D CAD software from Siemens, a German company. Solid Edge has an out-of-bounds read vulnerability that can be exploited by attackers to execute cod...

Siemens Teamcenter Visualization和Solid Edge堆缓冲区溢出漏洞

Siemens Teamcenter Visualization, a software that provides team collaboration capabilities for designing 2D and 3D scenes, and Siemens Solid Edge, a 3D CAD software from Siemens, Germany, are vulnerable to a heap buffer overflow vulnerability in Siemens Teamcenter Visualization and Solid Edge is...

Mageia: Security Advisory (MGASA-2014-0185)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2014-0184)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeCAD ODA Command Injection Vulnerability

FreeCad is a free and open source general-purpose parametric 3D Cad modeler from the FreeCad community and supports the finite element method of building information modeling software. A command injection vulnerability exists in FreeCAD version 0.19, which stems from improper cleanup when calling...

Slic3r Denial of Service Vulnerability (CNVD-2022-67485)

slic3r is a slic3r open source 3D printing toolkit used to convert various 3-D print model file types into printer-specific machine code. slic3r version 1.3.0 has a denial-of-service vulnerability in the 3MF parser component that stems from not properly handling incoming error messages. An attack...

Slic3r Denial of Service Vulnerability (CNVD-2022-67486)

slic3r is a slic3r open source 3D printing toolkit used to convert various 3-D print model file types to printer-specific machine code. slic3r version 1.3.0 has a denial-of-service vulnerability in the AMF parser that stems from not properly handling incoming error messages. An attacker could use...

CVE-2021-34086

In Ultimaker S3 3D printer, Ultimaker S5 3D printer, Ultimaker 3 3D printer S-line through 6.3 and Ultimaker 3 through 5.2.16, the local webserver hosts APIs vulnerable to CSRF. They do not verify incoming requests...