9144 matches found
CVE-2021-21463
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...
CVE-2021-21462
SAP 3D Visual Enterprise Viewer 9 contains a PCX file parsing flaw that enables an out-of-bounds write, leading to remote code execution. Exploitation described by ZDI requires user interaction (victim must open a malicious PCX or visit a malicious page); other sources note crash/unavailability. ...
CVE-2021-21457
SAP 3D Visual Enterprise Viewer (version 9) is affected by CVE-2021-21457 through a vulnerable IFF file parsing path. The issue stems from improper input validation, enabling memory corruption that can crash the application and, per ZDI, allow remote code execution with user interaction required ...
CVE-2021-21456
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...
CVE-2021-21456
SAP 3D Visual Enterprise Viewer (v9) is affected by a DIB file parsing vulnerability enabling out-of-bounds write and remote code execution. The root cause is improper validation of user-supplied data during DIB parsing, allowing an attacker to execute arbitrary code in the process context. Explo...
CVE-2021-21461
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...
CVE-2021-21461
The CVE-2021-21461 entry affects SAP 3D Visual Enterprise Viewer (version 9). The vulnerability lies in BMP file parsing due to improper input validation, enabling a remote attacker to cause an out-of-bounds write and, per ZDI, remote code execution when a user opens a malicious BMP file. Exploit...
CVE-2021-21458
CVE-2021-21458 affects SAP 3D Visual Enterprise Viewer, version 9. The issue arises in parsing IFF files due to improper input validation, causing memory corruption and a crash that can be leveraged for remote code execution. Exploitation requires user interaction (e.g., opening a malicious file ...
CVE-2021-21450
CVE-2021-21450 affects SAP 3D Visual Enterprise Viewer (version 9). The issue resides in PSD file parsing, where lack of proper validation leads to memory corruption, enabling remote code execution. Exploitation requires user interaction (e.g., opening a malicious PSD), and the attacker could run...
CVE-2021-21454
SAP 3D Visual Enterprise Viewer 9 is affected by a vulnerability in RLE file parsing. The issue stems from improper input validation that allows a crafted RLE file to trigger an out-of-bounds write, enabling remote code execution or a crash. Several sources (including ZDI-21-008) describe that ex...
CVE-2021-21464
Summary: CVE-2021-21464 affects SAP 3D Visual Enterprise Viewer (version 9). The root cause is improper input validation that allows a manipulated PCX file from an untrusted source to crash the application, causing temporary unavailability until restart. This vulnerability primarily impacts avail...
CVE-2021-21451
The CVE-2021-21451 entry affects SAP 3D Visual Enterprise Viewer (version 9). Connected advisories describe a parsing vulnerability in SGI file handling, caused by improper input validation leading to memory corruption. This can allow remote code execution with user interaction (e.g., opening a m...
CVE-2021-21455
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...
CVE-2021-21455
SAP 3D Visual Enterprise Viewer (version 9) is affected by a DIB file parsing vulnerability that leads to a heap-based buffer overflow and remote code execution. The issue arises from improper/length validation when parsing DIB data, enabling an attacker to run arbitrary code in the context of th...
CVE-2021-21452
SAP 3D Visual Enterprise Viewer (version 9) contains a GIF parsing vulnerability that causes memory corruption/input validation failure, leading to crashes and, per ZDI, remote code execution. The issue stems from improper handling of user-supplied GIF data during parsing, enabling exploitation a...
CVE-2021-21460
SAP 3D Visual Enterprise Viewer 9 is affected by CVE-2021-21460 due to a DIB file parsing flaw. The vulnerability is a heap-based buffer overflow in the DIB parsing code that can be triggered by processing manipulated DIB files from untrusted sources, leading to remote code execution (as describe...
CVE-2021-21459
SAP 3D Visual Enterprise Viewer (v9) is affected by an IFF file parsing vulnerability caused by improper input validation. Multiple connected sources (ZDI, Red Hat, CNVD, NVD) indicate the issue can crash the application and, in some entries, enable remote code execution when a manipulated IFF fi...
Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: January 12, 2021
None None...
