When a user opens manipulated Tag Image File Format (.TIFF) format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application.
References
| Link | Resource |
|---|---|
| https://launchpad.support.sap.com/#/notes/3027758 | Vendor Advisory |
| https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107 | Vendor Advisory |
| https://www.zerodayinitiative.com/advisories/ZDI-21-294/ | Third Party Advisory VDB Entry |
Configurations
History
25 Mar 2021, 13:53
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://www.zerodayinitiative.com/advisories/ZDI-21-294/ - Third Party Advisory, VDB Entry | |
| CVSS |
v2 : v3 : |
v2 : 6.8
v3 : 7.8 |
15 Mar 2021, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
10 Mar 2021, 18:51
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://launchpad.support.sap.com/#/notes/3027758 - Vendor Advisory | |
| References | (MISC) https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107 - Vendor Advisory | |
| CPE | cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : 4.3
v3 : 3.3 |
| CWE | NVD-CWE-noinfo |
09 Mar 2021, 15:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-03-09 15:15
Updated : 2023-12-10 13:41
NVD link : CVE-2021-27590
Mitre link : CVE-2021-27590
CVE.ORG link : CVE-2021-27590
JSON object : View
Products Affected
sap
- 3d_visual_enterprise_viewer
CWE