CVE-2021-27587

CVE-2021-27587 affects SAP 3D Visual Enterprise Viewer 9 through JT file parsing flaws. The connected advisories describe two distinct vulnerabilities: (1) a Null Pointer Dereference (ZDI-21-310) and (2) an Out-of-Bounds Write (ZDI-21-312). Both enable remote code execution in the context of the ...

CVE-2021-27587

When a user opens manipulated Jupiter Tessellation .JT format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2021-27591

CVE-2021-27591 affects SAP 3D Visual Enterprise Viewer 9. The SAP PDF parser is susceptible to memory corruption when parsing crafted PDFs, leading to a crash or remote code execution. ZDI-21-298 notes remote-code-execution via PDF parsing with memory corruption; attacker interaction is required ...

CVE-2021-27591

When a user opens manipulated Portable Document Format .PDF format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2021-27589

SAP 3D Visual Enterprise Viewer 9 is affected by CVE-2021-27589 via SVG parsing vulnerability. The issue is a parsing/use-after-free-like flaw where the viewer may perform operations on a non-validated object while processing crafted SVG files, enabling arbitrary code execution. Exploitation requ...

CVE-2021-27589

When a user opens manipulated Scalable Vector Graphics .SVG format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2021-27585

SAP 3D Visual Enterprise Viewer 9 CGM parsing vulnerability (CVE-2021-27585) is documented in ZDI advisories as a stack-based buffer overflow in CGM file parsing that can lead to remote code execution. The flaw arises from insufficient validation of CGM data length prior to copying into a fixed-l...

CVE-2021-27585

When a user opens manipulated Computer Graphics Metafile .CGM format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2021-21493

When a user opens manipulated Graphics Interchange Format .GIF format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2021-21493

SAP 3D Visual Enterprise Viewer 9 is affected by GIF parsing vulnerabilities (CVE-2021-21493). Multiple connected advisories (e.g., ZDI-21-289/296/290/293/297/295/291, etc.) describe memory corruption or out-of-bounds/write conditions in GIF file parsing that can lead to remote code execution. Ex...

CVE-2021-27589: Undefined Security Weakness

When a user opens manipulated Scalable Vector Graphics .SVG format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

PT-2021-7208

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Viewer affected versions not specified Description The issue is related to insufficient input validation when processing PDF files, which can cause the application to crash and become temporarily unavailable until it i...

CVE-2021-27591: Undefined Security Weakness

When a user opens manipulated Portable Document Format .PDF format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

PT-2021-7054

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Viewer affected versions not specified Description The issue is related to insufficient input validation when processing certain file types, including Autodesk 3D Studio for MS-DOS .3DS files and PDF files, which can...

SAP 3D Visual Enterprise Viewer 安全漏洞

SAP 3D Visual Enterprise Viewer is a free 3D visualization viewer for Windows. A denial of service vulnerability exists in SAP 3D Visual Enterprise Viewer 9. The vulnerability stems from improper input validation. An attacker could exploit the vulnerability by means of a specially crafted .PDF...

PT-2021-17530

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Viewer affected versions not specified Description The issue occurs when a user opens manipulated Universal 3D .U3D files received from untrusted sources in SAP 3D Visual Enterprise Viewer, causing the application to...

PT-2021-17528

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Viewer version 9 Description The issue occurs when a user opens manipulated Tag Image File Format .TIFF files from untrusted sources, causing the application to crash and become temporarily unavailable until it is...

PT-2021-17527

Name of the Vulnerable Software and Affected Versions SAP 3D Visual Enterprise Viewer version 9 Description The issue occurs when a user opens manipulated Scalable Vector Graphics .SVG format files received from untrusted sources in SAP 3D Visual Enterprise Viewer. This causes the application to...

CVE-2021-27586: Undefined Security Weakness

When a user opens manipulated Interchange File Format .IFF format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2021-27588: Undefined Security Weakness

When a user opens manipulated HPGL format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application...