CVE-2022-26106: Improper Input Validation

When a user opens a manipulated Computer Graphics Metafile .cgm, CgmCore.dll received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...

Microsoft Office Visio 代码注入漏洞

Microsoft Office is an office software suite of products from Microsoft Corporation USA. Microsoft Office Visio is vulnerable to remote code execution. The vulnerability is due to a boundary error in the processing of EMRCOMMENTEMFPLUS records in EMF images. A remote attacker could exploit this...

PT-2021-6388

Name of the Vulnerable Software and Affected Versions Microsoft Office Visio affected versions not specified Description The issue is related to errors in handling EMR COMMENT EMFPLUS records in EMF files, which can lead to untrusted pointer dereference. This can allow an attacker to execute...

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages, related to array indexing errors, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages stems from errors in array indexing during syntax analysis of EMF files. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

PT-2021-6330 · Microsoft · Office Visio

Name of the Vulnerable Software and Affected Versions: Microsoft Visio affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing an attacker to execute arbitrary code. This is associated with the parsing of EMF files. Recommendations: At the moment...

CVE-2021-25456

OOB read vulnerability in libswmfextractor.so library prior to SMR Sep-2021 Release 1 allows attackers to execute memcpy at arbitrary address via forged wmf file...

CVE-2021-33717

A vulnerability has been identified in JT2Go All versions V13.2.0.1, Teamcenter Visualization All versions V13.2.0.1. When parsing specially crafted CGM Files, a NULL pointer deference condition could cause the application to crash. The application must be restarted to restore the service. An...

CVE-2021-33717

A vulnerability has been identified in JT2Go All versions V13.2.0.1, Teamcenter Visualization All versions V13.2.0.1. When parsing specially crafted CGM Files, a NULL pointer deference condition could cause the application to crash. The application must be restarted to restore the service. An...

PT-2021-4715 · Microsoft · Office Visio

Name of the Vulnerable Software and Affected Versions: Microsoft Office Visio affected versions not specified Description: The issue is caused by errors in array indexing when parsing EMF files, allowing an attacker to execute arbitrary code using a specially crafted file. Recommendations: At the...

CVE-2021-33681

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated CGM file received from untrusted sources which causes out of bounds write and causes the application to crash and becoming temporarily unavailable until the user restarts the application...

CVE-2021-31894

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier All versions, SIMATIC PCS 7 V9.X All versions V9.1 SP2, SIMATIC PDM All versions V9.2 SP2, SIMATIC STEP 7 V5.X All versions V5.7, SINAMICS STARTER containing STEP 7 OEM version All versions V5.4 SP2 HF1. A directory containing...

Siemens SIMATIC PCS 7 安全漏洞

Siemens SIMATIC PCS 7 is a process control system from Siemens, Germany. A security vulnerability exists in Siemens SIMATIC PCS 7, which can be exploited by an attacker to alter the contents of certain metafiles...

PT-2021-19390 · Opentext · Opentext Brava! Desktop

Name of the Vulnerable Software and Affected Versions: OpenText Brava! Desktop version 16.6.3.84 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious file...

CVE-2021-27585

When a user opens manipulated Computer Graphics Metafile .CGM format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

libwmf security update

CentOS Errata and Security Advisory CESA-2020:3943 An update for libwmf is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

CVE-2020-6375

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Right Computer Graphics Metafile .cgm file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due ...

CVE-2020-6375: Improper Input Validation

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Right Computer Graphics Metafile .cgm file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due ...

Low: Red Hat Security Advisory: libwmf security and bug fix update

An update for libwmf is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

SAP 3D visual Enterprise Viewer input validation error vulnerability (CNVD-2020-65565)

SAP 3D Visual Enterprise Viewer is a free 3D visualization viewer for Windows. An input validation error vulnerability exists in SAP 3D Visual Enterprise Viewer version 9. The vulnerability stems from improper input validation. An attacker could exploit the vulnerability by means of a specially...

CVE-2020-6328

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated CGM file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...