CVE-2021-27643

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.
Configurations

Configuration 1 (hide)

cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*

History

21 Nov 2024, 05:58

Type Values Removed Values Added
References () https://launchpad.support.sap.com/#/notes/3059999 - Permissions Required, Vendor Advisory () https://launchpad.support.sap.com/#/notes/3059999 - Permissions Required, Vendor Advisory
References () https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999 - Vendor Advisory () https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999 - Vendor Advisory

11 Jun 2021, 19:04

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : 4.3
v3 : 5.5
References (MISC) https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999 - (MISC) https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999 - Vendor Advisory
References (MISC) https://launchpad.support.sap.com/#/notes/3059999 - (MISC) https://launchpad.support.sap.com/#/notes/3059999 - Permissions Required, Vendor Advisory
CPE cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*
CWE CWE-20

09 Jun 2021, 15:04

Type Values Removed Values Added
New CVE

Information

Published : 2021-06-09 14:15

Updated : 2024-11-21 05:58


NVD link : CVE-2021-27643

Mitre link : CVE-2021-27643

CVE.ORG link : CVE-2021-27643


JSON object : View

Products Affected

sap

  • 3d_visual_enterprise_viewer
CWE
CWE-20

Improper Input Validation