CVE-2021-21450

CVE-2021-21450 affects SAP 3D Visual Enterprise Viewer (version 9). The issue resides in PSD file parsing, where lack of proper validation leads to memory corruption, enabling remote code execution. Exploitation requires user interaction (e.g., opening a malicious PSD), and the attacker could run...

CVE-2021-21450

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21453

CVE-2021-21453 affects SAP 3D Visual Enterprise Viewer (version 9) via the RLE file parsing path. The issue is a memory corruption/vector in the RLE parsing code that can be triggered by opening a manipulated RLE file from untrusted sources, leading to remote code execution. The exploit requires ...

CVE-2021-21453

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21454

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21454

SAP 3D Visual Enterprise Viewer 9 is affected by a vulnerability in RLE file parsing. The issue stems from improper input validation that allows a crafted RLE file to trigger an out-of-bounds write, enabling remote code execution or a crash. Several sources (including ZDI-21-008) describe that ex...

CVE-2021-21464

Summary: CVE-2021-21464 affects SAP 3D Visual Enterprise Viewer (version 9). The root cause is improper input validation that allows a manipulated PCX file from an untrusted source to crash the application, causing temporary unavailability until restart. This vulnerability primarily impacts avail...

CVE-2021-21464

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21451

The CVE-2021-21451 entry affects SAP 3D Visual Enterprise Viewer (version 9). Connected advisories describe a parsing vulnerability in SGI file handling, caused by improper input validation leading to memory corruption. This can allow remote code execution with user interaction (e.g., opening a m...

CVE-2021-21451

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SGI file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21455

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21455

SAP 3D Visual Enterprise Viewer (version 9) is affected by a DIB file parsing vulnerability that leads to a heap-based buffer overflow and remote code execution. The issue arises from improper/length validation when parsing DIB data, enabling an attacker to run arbitrary code in the context of th...

CVE-2021-21452

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21452

SAP 3D Visual Enterprise Viewer (version 9) contains a GIF parsing vulnerability that causes memory corruption/input validation failure, leading to crashes and, per ZDI, remote code execution. The issue stems from improper handling of user-supplied GIF data during parsing, enabling exploitation a...

CVE-2021-21460

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21460

SAP 3D Visual Enterprise Viewer 9 is affected by CVE-2021-21460 due to a DIB file parsing flaw. The vulnerability is a heap-based buffer overflow in the DIB parsing code that can be triggered by processing manipulated DIB files from untrusted sources, leading to remote code execution (as describe...

CVE-2021-21459

SAP 3D Visual Enterprise Viewer (v9) is affected by an IFF file parsing vulnerability caused by improper input validation. Multiple connected sources (ZDI, Red Hat, CNVD, NVD) indicate the issue can crash the application and, in some entries, enable remote code execution when a manipulated IFF fi...

PT-2021-14532

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Viewer version 9 Description The issue allows a user to open a manipulated PCX file from untrusted sources, resulting in the application crashing and becoming temporarily unavailable until the user restarts it. This is...

PT-2021-14519

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Viewer version 9 Description The issue is caused by improper input validation, allowing a user to open a manipulated SGI file from untrusted sources. This results in the application crashing and becoming temporarily...

PT-2021-14528

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Viewer version 9 Description The issue is caused by improper input validation, allowing a user to open a manipulated DIB file from untrusted sources. This results in the application crashing and becoming temporarily...