Lucene search
K

341 matches found

Zero Day Initiative
Zero Day Initiative
added 2022/11/03 12:0 a.m.18 views

SAP 3D Visual Enterprise Viewer OBJ File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

3.3CVSS3AI score0.00134EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/11/03 12:0 a.m.35 views

SAP 3D Visual Enterprise Author OBJ File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of SAP 3D Visual Enterprise Author. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

3.3CVSS3AI score0.00046EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/11/03 12:0 a.m.24 views

SAP 3D Visual Enterprise Viewer OBJ File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

3.3CVSS2.4AI score0.01765EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/11/03 12:0 a.m.21 views

SAP 3D Visual Enterprise Viewer OBJ File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

3.3CVSS2.4AI score0.01765EPSS
Exploits0References1
CNVD
CNVD
added 2022/10/13 12:0 a.m.16 views

SAP 3D Visual Enterprise Viewer .obj Denial of Service Vulnerability

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, Germany. The software supports the publishing of 2D and 3D scenes in all industry-standard desktop applications and supports separate installation as a stand-alone executable program and ActiveX space. A denial of service vulnerability...

7.8CVSS7.3AI score0.00134EPSS
Exploits0References1
NVD
NVD
added 2022/10/11 9:15 p.m.11 views

CVE-2022-41188

Due to lack of proper memory management, when a victim opens manipulated Wavefront Object .obj, ObjTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until...

7.8CVSS0.00134EPSS
Exploits0References2
OSV
OSV
added 2022/10/11 9:15 p.m.2 views

CVE-2022-41187

Due to lack of proper memory management, when a victim opens a manipulated Wavefront Object .obj, ObjTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based...

7.8CVSS5.9AI score0.01765EPSS
Exploits0References2
OSV
OSV
added 2022/10/11 9:15 p.m.3 views

CVE-2022-39808

Due to lack of proper memory management, when a victim opens a manipulated Wavefront Object .obj, ObjTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based...

7.8CVSS5.9AI score0.0019EPSS
Exploits0References2
Prion
Prion
added 2022/10/11 9:15 p.m.15 views

Stack overflow

Due to lack of proper memory management, when a victim opens a manipulated Wavefront Object .obj, ObjTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based...

4.4CVSS7.9AI score0.01765EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/11 12:0 a.m.2 views

PT-2022-25711 · Sap · Sap 3D Visual Enterprise Viewer

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Viewer version 9 Description: The issue arises due to improper memory management. When a user opens a manipulated Wavefront Object .obj file in SAP 3D Visual Enterprise Viewer, the application can crash and become...

7.8CVSS7.5AI score0.00134EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/10/11 12:0 a.m.4 views

SAP 3D Visual Enterprise Author 缓冲区错误漏洞

SAP 3D Visual Enterprise Author is a desktop application from SAP Germany for managing 2D, 3D, animation, video and audio assets. SAP 3D Visual Enterprise Author suffers from a buffer overflow vulnerability that stems from a lack of proper memory management and can be exploited by attackers to Th...

5.5CVSS7.1AI score0.00046EPSS
Exploits0References4
Cvelist
Cvelist
added 2022/10/11 12:0 a.m.10 views

CVE-2022-41188

Due to lack of proper memory management, when a victim opens manipulated Wavefront Object .obj, ObjTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until...

7.8AI score0.00134EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/10/11 12:0 a.m.14 views

CVE-2022-39808

Due to lack of proper memory management, when a victim opens a manipulated Wavefront Object .obj, ObjTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based...

8.2AI score0.0019EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/10/11 12:0 a.m.18 views

CVE-2022-41166

Due to lack of proper memory management, when a victim opens manipulated Wavefront Object .obj, ObjTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until...

5.8AI score0.00046EPSS
Exploits0References2
CVE
CVE
added 2022/10/11 12:0 a.m.51 views

CVE-2022-41188

The CVE-2022-41188 entry concerns SAP 3D Visual Enterprise Viewer prior to version 9.0, where improper memory management during parsing of Wavefront OBJ files (ObjTranslator.exe) received from untrusted sources can crash the application. Connected sources corroborate a vulnerability in OBJ parsin...

7.8CVSS7.5AI score0.00134EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/11 12:0 a.m.4 views

PT-2022-25710 · Sap · Sap 3D Visual Enterprise Viewer

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Viewer version 9 Description: The issue arises due to improper memory management. When a victim opens a manipulated Wavefront Object .obj file in SAP 3D Visual Enterprise Viewer, it can trigger a Remote Code Execution...

7.8CVSS7.8AI score0.01765EPSS
Exploits0References6
NVD
NVD
added 2022/07/15 11:15 p.m.19 views

CVE-2022-35902

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-based application to open an OBJ file containing crafted data can force an out-of-bounds read. Exploitation of these vulnerabilities within...

3.3CVSS0.0006EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/07/15 11:15 p.m.2 views

CVE-2022-35902

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-based application to open an OBJ file containing crafted data can force an out-of-bounds read. Exploitation of these vulnerabilities within...

3.3CVSS5.8AI score0.0006EPSS
Exploits0References2
OSV
OSV
added 2022/07/15 11:15 p.m.2 views

CVE-2022-35902

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-based application to open an OBJ file containing crafted data can force an out-of-bounds read. Exploitation of these vulnerabilities within...

3.3CVSS5.8AI score0.0006EPSS
Exploits0References1
Prion
Prion
added 2022/07/15 11:15 p.m.20 views

Out-of-bounds

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-based application to open an OBJ file containing crafted data can force an out-of-bounds read. Exploitation of these vulnerabilities within...

1.9CVSS4.1AI score0.0006EPSS
Exploits0References1Affected Software2
Rows per page
Query Builder