Sap Se Sap 3D Visual Enterprise Viewer vulnerabilities

CVE-2020-6345 [MEDIUM] CWE-125 CVE-2020-6345: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TGA file received fr SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TGA file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.

CVE-2020-6333 [MEDIUM] CWE-20 CVE-2020-6333: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received fr SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.

CVE-2020-6375 [MEDIUM] CWE-20 CVE-2020-6375: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Right Computer Graph SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated Right Computer Graphics Metafile (.cgm) file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.

CVE-2022-32239 [MEDIUM] CWE-20 CVE-2022-32239: When a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) files received from untrusted sources in SA When a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application.

CVE-2021-33661 [MEDIUM] CWE-20 CVE-2021-33661: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received fr SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.

CVE-2021-27638 [MEDIUM] CWE-20 CVE-2021-27638: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated JT file received fro SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated JT file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.

CVE-2021-27640 [MEDIUM] CWE-20 CVE-2021-27640: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received fr SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.

CVE-2021-27641 [MEDIUM] CWE-20 CVE-2021-27641: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TIF file received fr SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.

CVE-2021-27642 [MEDIUM] CWE-20 CVE-2021-27642: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received fr SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.

CVE-2021-33660 [MEDIUM] CWE-20 CVE-2021-33660: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FLI file received fr SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FLI file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.

CVE-2021-27643 [MEDIUM] CWE-20 CVE-2021-27643: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received fr SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.

CVE-2021-27639 [MEDIUM] CWE-20 CVE-2021-27639: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated JT file received fro SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated JT file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.

CVE-2021-33659 [MEDIUM] CWE-20 CVE-2021-33659: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received fr SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.

CVE-2022-32237 [MEDIUM] CWE-20 CVE-2022-32237: When a user opens manipulated Computer Graphics Metafile (.cgm, CgmCore.dll) files received from unt When a user opens manipulated Computer Graphics Metafile (.cgm, CgmCore.dll) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application.

CVE-2022-32241 [MEDIUM] CWE-20 CVE-2022-32241: When a user opens manipulated Portable Document Format (.pdf, PDFView.x3d) files received from untru When a user opens manipulated Portable Document Format (.pdf, PDFView.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application.

CVE-2022-32243 [MEDIUM] CWE-20 CVE-2022-32243: When a user opens manipulated Scalable Vector Graphics (.svg, svg.x3d) files received from untrusted When a user opens manipulated Scalable Vector Graphics (.svg, svg.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application.

CVE-2022-35171 [MEDIUM] CWE-20 CVE-2022-35171: When a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) files received from untrusted sources in SA When a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant information can be found below

CVE-2021-21464 [MEDIUM] CWE-20 CVE-2021-21464: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received fr SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.

CVE-2021-21493 [LOW] CVE-2021-21493: When a user opens manipulated Graphics Interchange Format (.GIF) format files received from untruste When a user opens manipulated Graphics Interchange Format (.GIF) format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application.

CVE-2021-27595 [LOW] CVE-2021-27595: When a user opens manipulated Portable Document Format (.PDF) files received from untrusted sources When a user opens manipulated Portable Document Format (.PDF) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application.