CVE-2021-21493

SAP 3D Visual Enterprise Viewer 9 is affected by GIF parsing vulnerabilities (CVE-2021-21493). Multiple connected advisories (e.g., ZDI-21-289/296/290/293/297/295/291, etc.) describe memory corruption or out-of-bounds/write conditions in GIF file parsing that can lead to remote code execution. Ex...

PT-2021-17526

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Viewer version 9 Description The issue occurs when a user opens manipulated HPGL format files received from untrusted sources, causing the application to crash and become temporarily unavailable until it is restarted...

CVE-2021-27592: Undefined Security Weakness

When a user opens manipulated Universal 3D .U3D files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application...

PT-2021-7208

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Viewer affected versions not specified Description The issue is related to insufficient input validation when processing PDF files, which can cause the application to crash and become temporarily unavailable until it i...

CVE-2021-27590: Undefined Security Weakness

When a user opens manipulated Tag Image File Format .TIFF format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2021-27589: Undefined Security Weakness

When a user opens manipulated Scalable Vector Graphics .SVG format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2021-27584: Undefined Security Weakness

When a user opens manipulated PhotoShop Document .PSD format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2021-27591: Undefined Security Weakness

When a user opens manipulated Portable Document Format .PDF format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2021-27585: Undefined Security Weakness

When a user opens manipulated Computer Graphics Metafile .CGM format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2021-21493: Undefined Security Weakness

When a user opens manipulated Graphics Interchange Format .GIF format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2021-27587: Undefined Security Weakness

When a user opens manipulated Jupiter Tessellation .JT format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

PT-2021-7054

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Viewer affected versions not specified Description The issue is related to insufficient input validation when processing certain file types, including Autodesk 3D Studio for MS-DOS .3DS files and PDF files, which can...

PT-2021-17527

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Viewer version 9 Description The issue occurs when a user opens manipulated Scalable Vector Graphics .SVG format files received from untrusted sources in SAP 3D Visual Enterprise Viewer. This causes the application to...

PT-2021-14559

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Viewer version 9 Description The issue occurs when a user opens manipulated Graphics Interchange Format .GIF format files received from untrusted sources in SAP 3D Visual Enterprise Viewer. This causes the application ...

PT-2021-17529

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Viewer version 9 Description The issue occurs when a user opens manipulated Portable Document Format .PDF files from untrusted sources, causing the application to crash and become temporarily unavailable until it is...

PT-2021-17530

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Viewer affected versions not specified Description The issue occurs when a user opens manipulated Universal 3D .U3D files received from untrusted sources in SAP 3D Visual Enterprise Viewer, causing the application to...

CVE-2021-27586: Undefined Security Weakness

When a user opens manipulated Interchange File Format .IFF format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

PT-2021-17523

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Viewer version 9 Description The issue occurs when a user opens manipulated Computer Graphics Metafile .CGM format files received from untrusted sources, causing the application to crash and become temporarily...

PT-2021-17525

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Viewer version 9 Description The issue occurs when a user opens manipulated Jupiter Tessellation .JT format files received from untrusted sources, causing the application to crash and become temporarily unavailable unt...

PT-2021-17528

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Viewer version 9 Description The issue occurs when a user opens manipulated Tag Image File Format .TIFF files from untrusted sources, causing the application to crash and become temporarily unavailable until it is...