CVE-2020-6372

Опубликовано: 15 окт. 2020

Источник: nvd

CVSS3: 4.3

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.

Ссылки

https://launchpad.support.sap.com/#/notes/2973497
Permissions Required
Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-20-1264/
Third Party Advisory
VDB Entry
https://launchpad.support.sap.com/#/notes/2973497
Permissions Required
Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-20-1264/
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*

EPSS

Процентиль: 45%

0.00226

Низкий

4.3 Medium

CVSS3

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-639g-89rj-4q7p

github

больше 3 лет назад

EPSS

Процентиль: 45%

0.00226

Низкий

4.3 Medium

CVSS3

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-20