Sap 3D Visual Enterprise Viewer vulnerabilities

CVE-2022-41191 [HIGH] CWE-119 CVE-2022-41191: Due to lack of proper memory management, when a victim opens a manipulated Jupiter Tesselation (.jt, Due to lack of proper memory management, when a victim opens a manipulated Jupiter Tesselation (.jt, JTReader.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to o

CVE-2022-41200 [HIGH] CWE-119 CVE-2022-41200: Due to lack of proper memory management, when a victim opens a manipulated Scalable Vector Graphic ( Due to lack of proper memory management, when a victim opens a manipulated Scalable Vector Graphic (.svg, svg.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to o

CVE-2022-41189 [HIGH] CWE-119 CVE-2022-41189: Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dwg, TeighaTran Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dwg, TeighaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to over

CVE-2022-41196 [HIGH] CWE-119 CVE-2022-41196: Due to lack of proper memory management, when a victim opens a manipulated VRML Worlds (.wrl, vrml.x Due to lack of proper memory management, when a victim opens a manipulated VRML Worlds (.wrl, vrml.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten

CVE-2022-41202 [HIGH] CWE-119 CVE-2022-41202: Due to lack of proper memory management, when a victim opens a manipulated Visual Design Stream (.vd Due to lack of proper memory management, when a victim opens a manipulated Visual Design Stream (.vds, vds.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to over

CVE-2022-41198 [HIGH] CWE-119 CVE-2022-41198: Due to lack of proper memory management, when a victim opens a manipulated SketchUp (.skp, SketchUp. Due to lack of proper memory management, when a victim opens a manipulated SketchUp (.skp, SketchUp.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten

CVE-2022-41186 [HIGH] CWE-119 CVE-2022-41186: Due to lack of proper memory management, when a victim opens manipulated Computer Graphics Metafile Due to lack of proper memory management, when a victim opens manipulated Computer Graphics Metafile (.cgm, CgmCore.dll) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, a Remote Code Execution can be triggered when payload forces a stack-based overflow and or a re-use of dangling pointer which refers to overwritten s

CVE-2022-41199 [HIGH] CWE-119 CVE-2022-41199: Due to lack of proper memory management, when a victim opens a manipulated Open Inventor File (.iv, Due to lack of proper memory management, when a victim opens a manipulated Open Inventor File (.iv, vrml.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwri

CVE-2022-41195 [HIGH] CWE-119 CVE-2022-41195: Due to lack of proper memory management, when a victim opens a manipulated EAAmiga Interchange File Due to lack of proper memory management, when a victim opens a manipulated EAAmiga Interchange File Format (.iff, 2d.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refer

CVE-2021-27592 [HIGH] CVE-2021-27592: When a user opens manipulated Universal 3D (.U3D) files received from untrusted sources in SAP 3D Vi When a user opens manipulated Universal 3D (.U3D) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application.

CVE-2021-27585 [HIGH] CVE-2021-27585: When a user opens manipulated Computer Graphics Metafile (.CGM) format files received from untrusted When a user opens manipulated Computer Graphics Metafile (.CGM) format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application.

CVE-2021-27587 [HIGH] CVE-2021-27587: When a user opens manipulated Jupiter Tessellation (.JT) format files received from untrusted source When a user opens manipulated Jupiter Tessellation (.JT) format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application.

CVE-2021-27589 [HIGH] CVE-2021-27589: When a user opens manipulated Scalable Vector Graphics (.SVG) format files received from untrusted s When a user opens manipulated Scalable Vector Graphics (.SVG) format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application.

CVE-2021-27586 [HIGH] CVE-2021-27586: When a user opens manipulated Interchange File Format (.IFF) format files received from untrusted so When a user opens manipulated Interchange File Format (.IFF) format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application.

CVE-2021-27590 [HIGH] CVE-2021-27590: When a user opens manipulated Tag Image File Format (.TIFF) format files received from untrusted sou When a user opens manipulated Tag Image File Format (.TIFF) format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application.

CVE-2021-27588 [HIGH] CVE-2021-27588: When a user opens manipulated HPGL format files received from untrusted sources in SAP 3D Visual Ent When a user opens manipulated HPGL format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application.

CVE-2020-6374 [HIGH] CWE-20 CVE-2020-6374: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Jupiter Tessallation SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Jupiter Tessallation(.jt) file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.

CVE-2020-6372 [HIGH] CWE-20 CVE-2020-6372: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received fr SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.

CVE-2020-6373 [HIGH] CWE-20 CVE-2020-6373: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received fr SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.

CVE-2021-27591 [HIGH] CVE-2021-27591: When a user opens manipulated Portable Document Format (.PDF) format files received from untrusted s When a user opens manipulated Portable Document Format (.PDF) format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application.