CVE-2021-42068

When a user opens a manipulated GIF .gif file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2021-42070

When a user opens manipulated Jupiter Tessellation .jt file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...

Design/Logic Flaw

When a user opens a manipulated GIF .gif file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...

Design/Logic Flaw

When a user opens manipulated Jupiter Tessellation .jt file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...

Format string

When a user opens manipulated Tagged Image File Format .tif file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2021-42068

CVE-2021-42068 affects SAP 3D Visual Enterprise Viewer 9.0. Reports describe an input validation error when opening manipulated GIF files from untrusted sources, causing the application to crash and become temporarily unavailable until restart. The CVSS indicates low availability impact (A: LOW) ...

CVE-2021-42068

When a user opens a manipulated GIF .gif file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2021-42070

When a user opens manipulated Jupiter Tessellation .jt file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2021-42070

SAP 3D Visual Enterprise Viewer 9.0 is affected by an input-validation flaw in Jupiter Tessellation (JT) files, causing a crash and temporary unavailability when opening manipulated JT files from untrusted sources. Root cause identified as failure to validate JT inputs. SAP has issued security pa...

CVE-2021-42069

When a user opens manipulated Tagged Image File Format .tif file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2021-42069

CVE-2021-42069 affects SAP 3D Visual Enterprise Viewer 9.0. Public sources describe a parsing flaw in input files that can crash the application or lead to code execution. ZDI states a JT file parsing out-of-bounds write enabling remote code execution with user interaction required; other sources...

CVE-2021-42024

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer All versions 2021.3.1. The starview+.exe application lacks proper validation of user-supplied data when parsing scene files. This could result in an out of bounds write past the end of an allocated structure. An attacker could...

CVE-2021-42024

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer All versions 2021.3.1. The starview+.exe application lacks proper validation of user-supplied data when parsing scene files. This could result in an out of bounds write past the end of an allocated structure. An attacker could...

CVE-2021-42024

Summary: CVE-2021-42024 affects Simcenter STAR-CCM+ Viewer (all versions before 2021.3.1). The vulnerability is an out-of-bounds write in starview+.exe when parsing scene files due to improper validation of user-supplied data, which could allow code execution in the current process. Mitigation: u...

CVE-2021-42068: Improper Input Validation

When a user opens a manipulated GIF .gif file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2021-42070: Improper Input Validation

When a user opens manipulated Jupiter Tessellation .jt file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2021-42069: Out-of-bounds Write

When a user opens manipulated Tagged Image File Format .tif file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...

SAP 3D Visual Enterprise Viewer 输入验证错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces. SAP 3D Visual Enterprise Viewer version 9.0 is...

Siemens Simcenter STAR-CCM+ 缓冲区错误漏洞

Simcenter STAR-CCM+ is a multi-physics computational fluid dynamics CFD software for simulation and Simcenter STAR-CCM+ Viewer is a lightweight viewer. The Simcenter STAR-CCM+ Viewer file parsing vulnerability can be exploited by an attacker to execute code in the context of the current process...

Siemens Simcenter STAR-CCM+ Viewer

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: Simcenter STAR-CCM+ Viewer Vulnerability: Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of this vulnerability could lead to a crash, arbitrary code execution, or data extraction. 3...