CVE-2020-26993

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing CGM files. This could lead to a stack based buffer overflow while trying to copy to a buffer in the fon...

CVE-2020-26992

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing CGM files. This could lead to a stack based buffer overflow while trying to copy to a buffer during fon...

CVE-2020-26982

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing CG4 and CGM files. This could result in an out of bounds write past the end of an allocated structure. ...

CVE-2020-26982

Siemens JT2Go and Teamcenter Visualization (versions before 13.1.0) are affected by CVE-2020-26982 due to improper validation when parsing CG4 and CGM files, causing out-of-bounds write and potential remote code execution in the process context (ZDI-11898). The issue part of a broader set of vuln...

PT-2021-11282

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to 13.1.0 Teamcenter Visualization versions prior to 13.1.0 Description: A vulnerability has been identified in the affected applications, where they lack proper validation of user-supplied data when parsing CG4 and CGM...

CVE-2020-26993: Stack-based Buffer Overflow

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing CGM files. This could lead to a stack based buffer overflow while trying to copy to a buffer in the fon...

CVE-2020-26982: Out-of-bounds Write

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing CG4 and CGM files. This could result in an out of bounds write past the end of an allocated structure. ...

CVE-2020-26992: Stack-based Buffer Overflow

A vulnerability has been identified in JT2Go All versions V13.1.0, Teamcenter Visualization All versions V13.1.0. Affected applications lack proper validation of user-supplied data when parsing CGM files. This could lead to a stack based buffer overflow while trying to copy to a buffer during fon...

PT-2021-11293

Name of the Vulnerable Software and Affected Versions: JT2Go versions prior to 13.1.0 Teamcenter Visualization versions prior to 13.1.0 Description: A vulnerability has been identified due to the lack of proper validation of user-supplied data when parsing CGM files. This could lead to a...

cgmdistribution.com Cross Site Scripting vulnerability OBB-1423097

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Input validation

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Right Computer Graphics Metafile .cgm file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due ...

CVE-2020-6375

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Right Computer Graphics Metafile .cgm file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due ...

CVE-2020-6375

SAP 3D Visual Enterprise Viewer (version 9) is affected by CVE-2020-6375 due to improper input validation when opening manipulated CGM files from untrusted sources, which can crash the application and render it temporarily unavailable until restart. The connected documents confirm the issue and p...

CVE-2020-6375

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Right Computer Graphics Metafile .cgm file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due ...

PT-2020-19148

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Viewer version 9 Description The issue is caused by improper input validation, allowing a user to open a manipulated Right Computer Graphics Metafile .cgm file from untrusted sources. This results in the application...

SAP 3D Visual Enterprise Viewer CGM File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2020-6328

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated CGM file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6328

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated CGM file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6328

SAP 3D Visual Enterprise Viewer 9 is affected by a CGM file parsing vulnerability arising from improper input validation. The issue allows a user to open a manipulated CGM file from untrusted sources, with ZDI describing a remote code execution via untrusted pointer dereference during CGM parsing...

CVE-2020-6328: Improper Restriction of Operations within the Bounds of a Memory Buffer

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated CGM file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...