CVE-2021-27592

Опубликовано: 09 мар. 2021

Источник: nvd

CVSS3: 4.3

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

When a user opens manipulated Universal 3D (.U3D) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application.

Ссылки

https://launchpad.support.sap.com/#/notes/3027767
Permissions Required
Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-311/
Third Party Advisory
VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-21-313/
Third Party Advisory
VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-21-314/
Third Party Advisory
VDB Entry
https://launchpad.support.sap.com/#/notes/3027767
Permissions Required
Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-311/
Third Party Advisory
VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-21-313/
Third Party Advisory
VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-21-314/
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*

EPSS

Процентиль: 47%

0.00244

Низкий

4.3 Medium

CVSS3

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-64pc-prjv-x6hj

github

больше 3 лет назад

EPSS

Процентиль: 47%

0.00244

Низкий

4.3 Medium

CVSS3

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

NVD-CWE-noinfo