First published: Wed Jun 09 2021(Updated: )
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.
Credit: cna@sap.com
Affected Software | Affected Version | How to fix |
---|---|---|
SAP 3D Visual Enterprise Viewer | =9 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-27641 is a vulnerability in SAP 3D Visual Enterprise Viewer version 9 that allows a user to open manipulated TIF files from untrusted sources, causing the application to crash and become temporarily unavailable.
CVE-2021-27641 affects SAP 3D Visual Enterprise Viewer version 9 by allowing a user to open manipulated TIF files from untrusted sources, leading to crashes and temporary unavailability of the application.
CVE-2021-27641 has a severity rating of medium with a score of 5.5.
To fix CVE-2021-27641, update SAP 3D Visual Enterprise Viewer to a version that is not affected by the vulnerability and avoid opening manipulated TIF files from untrusted sources.
Yes, you can find additional information about CVE-2021-27641 in the SAP Support Portal's note 3059999 and the SAP Community Network's wiki page.