CVE-2021-27585
published 2021-03-09CVE-2021-27585: When a user opens manipulated Computer Graphics Metafile (.CGM) format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the…
PriorityP335high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
1.37%
68.7th percentile
When a user opens manipulated Computer Graphics Metafile (.CGM) format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sap | 3d_visual_enterprise_viewer | — | — |
| sap_se | sap_3d_visual_enterprise_viewer | < 9 | 9 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv3.04.3MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
ring vulnerabilities
osv·2023-10-24·CVSS 9.8
CVE-2021-37706 ring vulnerabilities
ring vulnerabilities
It was discovered that Ring incorrectly handled certain inputs. If a user or
an automated system were tricked into opening a specially crafted input file,
a remote attacker could possibly use this issue to execute arbitrary code.
(CVE-2021-37706)
It was discovered that Ring incorrectly handled certain inputs. If a user or
an automated system were tricked into opening a specially crafted input file,
a remote attacker could possibly use this issue to cause a denial of service.
(CVE-2023-27585)
Original advisory details:
It was discovered that Ring incorrectly handled certain inputs. If a user or
an automated system were tricked into opening a specially crafted input file,
a remote attacker could possibly use this issue to execute arbitrary code.
(CVE-2021-37706)
I
GHSA
GHSA-p6gp-j7hv-gp78: When a user opens manipulated Computer Graphics Metafile (
ghsa_unreviewed·2022-05-24
CVE-2021-27585 [MEDIUM] GHSA-p6gp-j7hv-gp78: When a user opens manipulated Computer Graphics Metafile (
When a user opens manipulated Computer Graphics Metafile (.CGM) format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://launchpad.support.sap.com/#/notes/3027758https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107https://www.zerodayinitiative.com/advisories/ZDI-21-288/https://www.zerodayinitiative.com/advisories/ZDI-21-299/https://launchpad.support.sap.com/#/notes/3027758https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107https://www.zerodayinitiative.com/advisories/ZDI-21-288/https://www.zerodayinitiative.com/advisories/ZDI-21-299/
2021-03-09
Published