CVE-2022-27654

When a user opens a manipulated Photoshop Document .psd, 2d.x3d received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2022-27654

When a user opens a manipulated Photoshop Document .psd, 2d.x3d received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2022-27654

SAP 3D Visual Enterprise Viewer (v9.0) is affected by CVE-2022-27654 through PSD file parsing, where a manipulated PSD/file can trigger a crash and potential code execution. The ZDI advisory specifies an out-of-bounds write during PSD parsing that allows remote code execution; user interaction is...