CVE-2021-21461

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21461

The CVE-2021-21461 entry affects SAP 3D Visual Enterprise Viewer (version 9). The vulnerability lies in BMP file parsing due to improper input validation, enabling a remote attacker to cause an out-of-bounds write and, per ZDI, remote code execution when a user opens a malicious BMP file. Exploit...