CVE-2020-6375

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Right Computer Graphics Metafile .cgm file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due ...

CVE-2020-6375

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Right Computer Graphics Metafile .cgm file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due ...

CVE-2020-6373

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

Input validation

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Jupiter Tessallation.jt file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper...

CVE-2020-6374

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Jupiter Tessallation.jt file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper...

CVE-2020-6376

CVE-2020-6376 affects SAP 3D Visual Enterprise Viewer, version 9, where processing of manipulated Right Hemisphere Binary (.rh) files from untrusted sources can cause the application to crash and become temporarily unavailable. The root cause is improper input validation in the RH file handling. ...

CVE-2020-6374

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Jupiter Tessallation.jt file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper...

CVE-2020-6374

CVE-2020-6374 affects SAP 3D Visual Enterprise Viewer (v9) with parsing of Jupiter Tessellations (.jt). The connected ZDI advisory documents a remote code execution vulnerability in JT file parsing caused by insufficient validation, leading to a read-before-allocation error. The issue can be trig...

CVE-2020-6375

SAP 3D Visual Enterprise Viewer (version 9) is affected by CVE-2020-6375 due to improper input validation when opening manipulated CGM files from untrusted sources, which can crash the application and render it temporarily unavailable until restart. The connected documents confirm the issue and p...

CVE-2020-6375

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Right Computer Graphics Metafile .cgm file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due ...

CVE-2020-6373

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

CVE-2020-6373

SAP 3D Visual Enterprise Viewer (version 9) contains a PDF parsing flaw that allows an out-of-bounds write, enabling remote code execution. The vulnerability arises from improper validation of user-supplied data during PDF parsing, and the exploit requires user interaction (e.g., opening a malici...

CVE-2020-6372

SAP 3D Visual Enterprise Viewer (version 9) is affected by CVE-2020-6372 due to a PDF parsing vulnerability. The root cause is improper input validation leading to a write past the end of an allocated buffer, enabling remote code execution when a user opens a manipulated PDF. Exploitation require...

KLA11980 ACE vulnerability in Microsoft Developer Tools

A remote code execution vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2020-17023 Related products Microsoft-Visual-Studio CVE list CVE-2020-17023 critical KB list Solution Install necessary...

Security Update for Microsoft Visual Studio Code Python Extension (Oct 2020)

A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads a Jupyter notebook file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative us...

Microsoft Patch Tuesday, October 2020 Edition

Its Cybersecurity Awareness Month! In keeping with that theme, if you abuse Microsoft Windows computers you should be aware the company shipped a bevy of software updates today to fix at least 87 security problems in Windows and programs that run on top of the operating system. That means its onc...

Visual Studio Code Python Extension Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads a Jupyter notebook file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative us...

PT-2020-4390 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: A remote code execution issue exists when the Python extension loads a Jupyter notebook file, allowing an attacker to run arbitrary code in the context of the current user. If th...

Vulnerabilities fixed in Microsoft Developer Tools

Microsoft has fixed several vulnerabilities. A malicious remote user could potentially exploit the vulnerabilities to execute arbitrary execute arbitrary code, bypass security measures or access gain access to sensitive data. Information about the vulnerability with reference CVE-2020-16937 is...

PT-2020-4394 · Microsoft · Visual Studio Code

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: A remote code execution issue exists when a user is tricked into opening a malicious 'package.json' file. An attacker who successfully exploits this could run arbitrary code in t...