CVE-2020-6345: 
SAP 3D Visual Enterprise Viewer vulnerability analysis and mitigation

SAP 3D Visual Enterprise Viewer version 9 contains a vulnerability (CVE-2020-6345) that allows remote attackers to execute arbitrary code through malicious TGA file parsing. The vulnerability was discovered in early 2020 and publicly disclosed on September 10, 2020. The issue affects the TGA file parsing functionality in SAP 3D Visual Enterprise Viewer and requires user interaction to exploit (ZDI Advisory, CVE Mitre).

The vulnerability exists within the parsing of TGA files and results from improper input validation. Specifically, the flaw allows an out-of-bounds read before the start of an allocated data structure when processing user-supplied data. The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (High) with the vector: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (ZDI Advisory).

If successfully exploited, this vulnerability allows attackers to execute arbitrary code in the context of the current process. The application may crash and become temporarily unavailable until restarted. The vulnerability potentially compromises the confidentiality, integrity, and availability of the affected system (CVE Mitre, ZDI Advisory).

The vulnerability requires user interaction to exploit, specifically requiring the target to visit a malicious page or open a malicious TGA file. An attacker can leverage this vulnerability by crafting a malicious TGA file that, when opened by the user, triggers the out-of-bounds read condition (ZDI Advisory).

SAP has released a security patch to address this vulnerability. Users are advised to apply the available update to protect their systems. The fix was documented in SAP's security notes (ZDI Advisory).