CVE-2021-21458

CVE-2021-21458 affects SAP 3D Visual Enterprise Viewer, version 9. The issue arises in parsing IFF files due to improper input validation, causing memory corruption and a crash that can be leveraged for remote code execution. Exploitation requires user interaction (e.g., opening a malicious file ...

CVE-2021-21450

CVE-2021-21450 affects SAP 3D Visual Enterprise Viewer (version 9). The issue resides in PSD file parsing, where lack of proper validation leads to memory corruption, enabling remote code execution. Exploitation requires user interaction (e.g., opening a malicious PSD), and the attacker could run...

CVE-2021-21450

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21453

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21453

CVE-2021-21453 affects SAP 3D Visual Enterprise Viewer (version 9) via the RLE file parsing path. The issue is a memory corruption/vector in the RLE parsing code that can be triggered by opening a manipulated RLE file from untrusted sources, leading to remote code execution. The exploit requires ...

CVE-2021-21454

SAP 3D Visual Enterprise Viewer 9 is affected by a vulnerability in RLE file parsing. The issue stems from improper input validation that allows a crafted RLE file to trigger an out-of-bounds write, enabling remote code execution or a crash. Several sources (including ZDI-21-008) describe that ex...

CVE-2021-21454

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21464

Summary: CVE-2021-21464 affects SAP 3D Visual Enterprise Viewer (version 9). The root cause is improper input validation that allows a manipulated PCX file from an untrusted source to crash the application, causing temporary unavailability until restart. This vulnerability primarily impacts avail...

CVE-2021-21464

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21451

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SGI file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21451

The CVE-2021-21451 entry affects SAP 3D Visual Enterprise Viewer (version 9). Connected advisories describe a parsing vulnerability in SGI file handling, caused by improper input validation leading to memory corruption. This can allow remote code execution with user interaction (e.g., opening a m...

CVE-2021-21455

SAP 3D Visual Enterprise Viewer (version 9) is affected by a DIB file parsing vulnerability that leads to a heap-based buffer overflow and remote code execution. The issue arises from improper/length validation when parsing DIB data, enabling an attacker to run arbitrary code in the context of th...

CVE-2021-21455

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21452

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21452

SAP 3D Visual Enterprise Viewer (version 9) contains a GIF parsing vulnerability that causes memory corruption/input validation failure, leading to crashes and, per ZDI, remote code execution. The issue stems from improper handling of user-supplied GIF data during parsing, enabling exploitation a...

CVE-2021-21460

SAP 3D Visual Enterprise Viewer 9 is affected by CVE-2021-21460 due to a DIB file parsing flaw. The vulnerability is a heap-based buffer overflow in the DIB parsing code that can be triggered by processing manipulated DIB files from untrusted sources, leading to remote code execution (as describe...

CVE-2021-21460

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21459

SAP 3D Visual Enterprise Viewer (v9) is affected by an IFF file parsing vulnerability caused by improper input validation. Multiple connected sources (ZDI, Red Hat, CNVD, NVD) indicate the issue can crash the application and, in some entries, enable remote code execution when a manipulated IFF fi...

SAP 3D Visual Enterprise Viewer 缓冲区错误漏洞

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP, Germany. The software supports the publishing of 2D and 3D scenes in all industry-standard desktop applications and supports separate installation as a stand-alone executable program and ActiveX space. A buffer overflow vulnerability...

CVE-2021-21452: Improper Restriction of Operations within the Bounds of a Memory Buffer

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...