CVE-2021-42069

Katalog CVE

CVSS 3.3 · Low EPSS 1,1%

Kerentanan Out-of-bounds Write pada sap 3d visual enterprise viewer. Skor CVSS 3.1 3.3 (Low) menurut NVD.

Deskripsi (NVD)

When a user opens manipulated Tagged Image File Format (.tif) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application

Rincian

Terbit di NVD

14 Desember 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.3 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

1,1% peluang dieksploitasi; lebih tinggi dari 63,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://wiki.scn.sap.com/wiki/display/PSR/SAP+Security+Patch+Day+-+December+2021 advisory vendor
• https://www.zerodayinitiative.com/advisories/ZDI-21-1551/ advisory pihak ketiga · vdb entry
• https://launchpad.support.sap.com/#/notes/3121165 permissions required