CVE-2021-21461

The CVE-2021-21461 entry affects SAP 3D Visual Enterprise Viewer (version 9). The vulnerability lies in BMP file parsing due to improper input validation, enabling a remote attacker to cause an out-of-bounds write and, per ZDI, remote code execution when a user opens a malicious BMP file. Exploit...

CVE-2021-21449

SAP 3D Visual Enterprise Viewer (v9) is affected by an IFF file parsing vulnerability that causes memory corruption and can lead to remote code execution. The issue stems from improper validation during IFF parsing, and exploitation requires user interaction (e.g., opening a malicious file or vis...

CVE-2021-21449

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21458

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21458

CVE-2021-21458 affects SAP 3D Visual Enterprise Viewer, version 9. The issue arises in parsing IFF files due to improper input validation, causing memory corruption and a crash that can be leveraged for remote code execution. Exploitation requires user interaction (e.g., opening a malicious file ...

CVE-2021-21450

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21450

CVE-2021-21450 affects SAP 3D Visual Enterprise Viewer (version 9). The issue resides in PSD file parsing, where lack of proper validation leads to memory corruption, enabling remote code execution. Exploitation requires user interaction (e.g., opening a malicious PSD), and the attacker could run...

CVE-2021-21453

CVE-2021-21453 affects SAP 3D Visual Enterprise Viewer (version 9) via the RLE file parsing path. The issue is a memory corruption/vector in the RLE parsing code that can be triggered by opening a manipulated RLE file from untrusted sources, leading to remote code execution. The exploit requires ...

CVE-2021-21453

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21454

SAP 3D Visual Enterprise Viewer 9 is affected by a vulnerability in RLE file parsing. The issue stems from improper input validation that allows a crafted RLE file to trigger an out-of-bounds write, enabling remote code execution or a crash. Several sources (including ZDI-21-008) describe that ex...

CVE-2021-21454

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21464

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21464

Summary: CVE-2021-21464 affects SAP 3D Visual Enterprise Viewer (version 9). The root cause is improper input validation that allows a manipulated PCX file from an untrusted source to crash the application, causing temporary unavailability until restart. This vulnerability primarily impacts avail...

CVE-2021-21451

The CVE-2021-21451 entry affects SAP 3D Visual Enterprise Viewer (version 9). Connected advisories describe a parsing vulnerability in SGI file handling, caused by improper input validation leading to memory corruption. This can allow remote code execution with user interaction (e.g., opening a m...

CVE-2021-21451

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SGI file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21455

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21455

SAP 3D Visual Enterprise Viewer (version 9) is affected by a DIB file parsing vulnerability that leads to a heap-based buffer overflow and remote code execution. The issue arises from improper/length validation when parsing DIB data, enabling an attacker to run arbitrary code in the context of th...

CVE-2021-21452

SAP 3D Visual Enterprise Viewer (version 9) contains a GIF parsing vulnerability that causes memory corruption/input validation failure, leading to crashes and, per ZDI, remote code execution. The issue stems from improper handling of user-supplied GIF data during parsing, enabling exploitation a...

CVE-2021-21452

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2021-21460

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...