high7.8
CVE-2021-27592
When a user opens manipulated Universal 3D (.U3D) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes…
Impact
When a user opens manipulated Universal 3D (.U3D) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | 3d Visual Enterprise Viewer | Version 9 |
References
- NVD record
- CVE.org record
- https://launchpad.support.sap.com/#/notes/3027767
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107
- https://www.zerodayinitiative.com/advisories/ZDI-21-311/
- https://www.zerodayinitiative.com/advisories/ZDI-21-313/
- https://www.zerodayinitiative.com/advisories/ZDI-21-314/
- https://launchpad.support.sap.com/#/notes/3027767
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107
- https://www.zerodayinitiative.com/advisories/ZDI-21-311/
- https://www.zerodayinitiative.com/advisories/ZDI-21-313/
- https://www.zerodayinitiative.com/advisories/ZDI-21-314/