Skip links

CVE-2020-26817 Improper input validation in Visual Enterprise Viewer, SAP security note 2985094

Description

When a user opens manipulated HPGL-files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application.

Available fix and Supported packages

  • VE_VIEWER_COMPLETE | 9 | 9
  • VE_VIEWER_COMPLETE 9.0 | SP009 | 000004

Affected component

    CA-VE-VEV
    SAP Visual Enterprise Viewer

CVSS

Score: 4.3
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Exploit

Exploit is not available.
For detailed information please contact the mail [email protected]

URL

https://launchpad.support.sap.com/#/notes/2985094

TAGS

#Improper-Input-Validation
#Information-Exposure
#Information-Leak
#SAP-3D-Visual-Enterprise-Viewer
#&160-CVE-2020-26817