SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.
References
Link | Resource |
---|---|
https://launchpad.support.sap.com/#/notes/3002617 | Permissions Required |
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476 | Vendor Advisory |
Configurations
History
19 Feb 2021, 13:59
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://launchpad.support.sap.com/#/notes/3002617 - Permissions Required |
11 Feb 2021, 21:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
12 Jan 2021, 19:33
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:* | |
References | (MISC) https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476 - Vendor Advisory | |
References | (MISC) https://www.zerodayinitiative.com/advisories/ZDI-21-002/ - Third Party Advisory, VDB Entry | |
References | (MISC) https://i7p.wdf.sap.corp/sap/support/notes/3002617 - Broken Link | |
CWE | CWE-787 | |
CVSS |
v2 : v3 : |
v2 : 6.8
v3 : 8.8 |
12 Jan 2021, 17:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
12 Jan 2021, 15:38
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-01-12 15:15
Updated : 2023-12-10 13:41
NVD link : CVE-2021-21459
Mitre link : CVE-2021-21459
CVE.ORG link : CVE-2021-21459
JSON object : View
Products Affected
sap
- 3d_visual_enterprise_viewer
CWE
CWE-787
Out-of-bounds Write