CVE-2020-6330: 
SAP 3D Visual Enterprise Viewer vulnerability analysis and mitigation

SAP 3D Visual Enterprise Viewer version 9 contains a vulnerability (CVE-2020-6330) that was discovered in 2020. The vulnerability allows remote attackers to execute arbitrary code on affected installations through the parsing of 3DM files within the rhino plugin. User interaction is required as the target must visit a malicious page or open a malicious file (ZDI Advisory, CVE Mitre).

The vulnerability stems from improper validation of user-supplied data during the parsing of 3DM files, which can result in an out-of-bounds read past the end of an allocated buffer. The vulnerability has been assigned a CVSS v3.1 base score of 4.3 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L. The flaw is classified as CWE-125 (Out-of-bounds Read) (NVD).

When exploited, this vulnerability can lead to the execution of arbitrary code in the context of the current process. The application may become temporarily unavailable until the user restarts it when a manipulated 3DM file from untrusted sources is opened (CVE Mitre).

The vulnerability requires user interaction for exploitation, specifically opening a malicious file or visiting a malicious page. The attack complexity is considered high, but no special privileges are required for exploitation (ZDI Advisory).

SAP has released an update to address this vulnerability. Users are advised to apply the security patch as detailed in the SAP security note (SAP Note).