SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated CGM file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.
References
| Link | Resource |
|---|---|
| https://launchpad.support.sap.com/#/notes/2960815 | Permissions Required |
| https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700 | Vendor Advisory |
| https://www.zerodayinitiative.com/advisories/ZDI-20-1137/ | Third Party Advisory VDB Entry |
| https://launchpad.support.sap.com/#/notes/2960815 | Permissions Required |
| https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700 | Vendor Advisory |
| https://www.zerodayinitiative.com/advisories/ZDI-20-1137/ | Third Party Advisory VDB Entry |
Configurations
History
21 Nov 2024, 05:35
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://launchpad.support.sap.com/#/notes/2960815 - Permissions Required | |
| References | () https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700 - Vendor Advisory | |
| References | () https://www.zerodayinitiative.com/advisories/ZDI-20-1137/ - Third Party Advisory, VDB Entry |
01 Dec 2021, 18:52
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-119 | |
| References | (MISC) https://www.zerodayinitiative.com/advisories/ZDI-20-1137/ - Third Party Advisory, VDB Entry |
Information
Published : 2020-09-09 13:15
Updated : 2024-11-21 05:35
NVD link : CVE-2020-6328
Mitre link : CVE-2020-6328
CVE.ORG link : CVE-2020-6328
JSON object : View
Products Affected
sap
- 3d_visual_enterprise_viewer
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer