CVE-2021-21449

February 19, 2021

SAP 3D Visual Enterprise Viewer, version – 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.

Summary:

SAP 3D Visual Enterprise Viewer, version – 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.

Reference Links(if available):

  • https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476
  • https://launchpad.support.sap.com/#/notes/3002617

  • CVSS Score (if available)

    v2: / MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

    v3: / HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

    Links to Exploits(if available)

  • You may have missed

    image

    [HUNTERS] – Ransomware Victim: Kumla Kommun

    November 14, 2024
    image

    [SARCOMA] – Ransomware Victim: ADT Freight Services Australia Pty Lt

    November 14, 2024
    image

    [AKIRA] – Ransomware Victim: Berexco LLC

    November 14, 2024
    image

    [AKIRA] – Ransomware Victim: Dumont Printing

    November 14, 2024
    image

    [AKIRA] – Ransomware Victim: Intercomp

    November 14, 2024