CVE-2020-6361

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE files received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6357

CVE-2020-6357 affects SAP 3D Visual Enterprise Viewer (version 9) via the U3D file parser. The issue is a vulnerability in input validation that can cause memory corruption when parsing manipulated U3D files from untrusted sources. Documents describe this as a potential remote code execution scen...

CVE-2020-6357

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated U3D file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6353

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6353

CVE-2020-6353 affects SAP 3D Visual Enterprise Viewer 9. The issue stems from improper input validation in SKP file parsing from untrusted sources, causing the application to crash and become temporarily unavailable (per SAP/NVD). ZDI specifies that the parsing flaw can lead to remote code execut...

CVE-2020-6356

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6356

SAP 3D Visual Enterprise Viewer 9 is affected by CVE-2020-6356 via a BMP file parsing vulnerability. The issue, caused by improper input validation, can lead to an out-of-bounds write and remote code execution when a user opens a crafted BMP file from untrusted sources; exploits require user inte...

CVE-2020-6354

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6354

CVE-2020-6354 affects SAP 3D Visual Enterprise Viewer (version 9). The issue is in the SKP file parser: crafted SKP files from untrusted sources can trigger a parsing fault due to improper input validation, causing the application to crash and become temporarily unavailable. According to ZDI, thi...

CVE-2020-6352

CVE-2020-6352 affects SAP 3D Visual Enterprise Viewer 9. The issue arises in FBX file parsing due to improper input validation, allowing crafted FBX files from untrusted sources to crash the application (and, per ZDI, enable remote code execution). Exploitation requires user interaction (e.g., op...

CVE-2020-6352

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FBX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6351

CVE-2020-6351 affects SAP 3D Visual Enterprise Viewer 9. The vulnerability lies in the FBX file parser where untrusted FBX files can be parsed after improper input validation, leading to a crash and, per ZDI, potential remote code execution via a crafted file. Exploitation requires user interacti...

CVE-2020-6351

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FBX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6349

SAP 3D Visual Enterprise Viewer (VEV) 9 is affected by a GIF file parsing vulnerability. The issue stems from improper validation in GIF parsing, leading to memory corruption. The ZDI advisory describes that an attacker can lure a user to open a crafted GIF file or malicious page, enabling remote...

CVE-2020-6349

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6347

CVE-2020-6347 affects SAP 3D Visual Enterprise Viewer (version 9). The issue is in HDR file parsing where lack of proper validation leads to memory corruption, which in ZDI’s advisory is described as enabling remote code execution; the public sources also note that exploitation requires user inte...

CVE-2020-6347

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HDR file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6350

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6350

SAP 3D Visual Enterprise Viewer is affected by CVE-2020-6350 via a BMP file parsing memory corruption flaw that can lead to remote code execution. The vulnerability requires user interaction (opening a malicious BMP/file or visiting a malicious page) and stems from improper validation of user-sup...

CVE-2020-6346

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...