CVE-2021-27589

When a user opens manipulated Scalable Vector Graphics .SVG format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2021-27589

creationtimestamp| type| source ---|---|--- 2021-03-09 18:52:08+00:00| seen| https://t.me/cibsecurity/24618...

CVE-2021-27589

When a user opens manipulated Scalable Vector Graphics .SVG format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2021-27589

SAP 3D Visual Enterprise Viewer 9 is affected by CVE-2021-27589 via SVG parsing vulnerability. The issue is a parsing/use-after-free-like flaw where the viewer may perform operations on a non-validated object while processing crafted SVG files, enabling arbitrary code execution. Exploitation requ...