CVE-2020-6337

CVE-2020-6337 affects SAP 3D Visual Enterprise Viewer (version 9). The issue is described as an HDR file parsing/input handling flaw caused by improper input validation, leading to a crash and temporary unavailability, with some sources noting potential memory corruption and remote code execution...

CVE-2020-6338

SAP 3D Visual Enterprise Viewer (version 9) is affected by CVE-2020-6338 due to improper input validation during RH file parsing. The vulnerability affects parsing RH files and can crash the application, causing temporary unavailability, with ZDI reporting a remote code execution possibility via ...

CVE-2020-6338

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RH file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6332

SAP 3D Visual Enterprise Viewer 9 is affected by CVE-2020-6332 due to improper input validation in the HPGL file parsing path. The HPGL plugin parsing manipulated HPGL files can cause the application to crash (availability impact) and, per ZDI, may enable remote code execution when a user opens a...

CVE-2020-6314

SAP 3D Visual Enterprise Viewer 9 contains an HPGL parsing vulnerability in the hpgl plugin caused by improper input validation. The flaw can allow an attacker to cause an application crash or, per ZDI, execute code remotely via a manipulated HPGL file, with exploitation requiring user interactio...

CVE-2020-6314

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HPGL file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6333

SAP 3D Visual Enterprise Viewer 9 is affected by CVE-2020-6333 due to an input validation flaw in HPGL file parsing. The vulnerability enables an out-of-bounds write when processing specially crafted HPGL/2D data, which can be exploited to execute code in the context of the affected process. Expl...

CVE-2020-6336

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6336

SAP 3D Visual Enterprise Viewer 9 is affected by CVE-2020-6336 via the PCX file parser. The vulnerability is an out-of-bounds write during PCX parsing, allowing remote code execution when a user opens a malicious PCX file. User interaction is required to exploit. No vendor patch details are provi...

CVE-2020-6341

CVE-2020-6341 : SAP 3D Visual Enterprise Viewer 9 contains an EPS file parsing vulnerability. The issue arises from improper validation leading to an out-of-bounds read, enabling arbitrary code execution when a user opens a malicious EPS file (remote code execution; requires user interaction). Af...

CVE-2020-6334

CVE-2020-6334 concerns SAP 3D Visual Enterprise Viewer (v9) where parsing of SKP files can trigger a use-after-free in a sandbox subprocess, allowing remote code execution. The vulnerability occurs when the software processes a manipulated SKP file from untrusted sources, with exploit requiring u...

CVE-2020-6334

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6335

SAP 3D Visual Enterprise Viewer 9 contains a vulnerability in the hpgl plugin that parses HPGL files. The issue arises from improper input validation leading to a write past the end of an allocated buffer (out-of-bounds write), enabling arbitrary code execution in the context of the affected proc...

SAP 3D Visual Enterprise Author, Generator and Viewer Unspecified Memory Corruption Vulnerability

SAP 3D Visual Enterprise Author, Generator and Viewer are products of SAP. The SAP 3D Visual Enterprise Viewer VEV is a suite of software for viewing, zooming, panning and rotating interactive 3D data as well as playing step-by-step animations. The SAP 3D Visual Enterprise Author, Generator and...

Memory Corruption Vulnerability in Multiple SAP Products

SAP 3D Visual Enterprise Viewer VEV and others are software from SAP. A memory corruption vulnerability exists in multiple SAP products due to the program's failure to properly bounds check user-supplied input before copying it to an undersized buffer. An attacker could exploit this vulnerability...

SAP 3D Visual Enterprise Viewer Memory Error References Remote Code Execution Vulnerability

SAP 3D Visual Enterprise Viewer VEV is a suite of software from SAP for viewing, zooming, panning and rotating interactive 3D data and playing step-by-step animations. A security vulnerability exists in SAP 3D Visual Enterprise Viewer. The vulnerability could be exploited by an attacker to execut...

SAP Memory Misreference Vulnerability

Founded in 1972 and headquartered in Waldorf, Germany, SAP is the world's largest provider of enterprise management and collaborative e-business solutions and the world's third largest independent software vendor. A memory misreference vulnerability exists in SAP 3D Visual Enterprise Viewer,...

Design/Logic Flaw

Multiple use-after-free vulnerabilities in SAP 3D Visual Enterprise Viewer allow remote attackers to execute arbitrary code via a crafted SketchUp document. NOTE: the primary affected product may be SketchUp...

CVE-2016-2536

CVE-2016-2536 concerns multiple use-after-free vulnerabilities in SAP 3D Visual Enterprise Viewer, exploitable via crafted SketchUp documents. The primary affected product is likely SketchUp. The ZDI advisories describe a remote code execution flaw that requires user interaction (target must open...

(0Day) SAP 3D Visual Enterprise Viewer SketchUp document Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...