CVE-2020-6376: 
SAP 3D Visual Enterprise Viewer vulnerability analysis and mitigation

SAP 3D Visual Enterprise Viewer version 9 contains a vulnerability that allows users to open manipulated Right Hemisphere Binary (.rh) files from untrusted sources. This vulnerability was disclosed on October 14, 2020, and is tracked as CVE-2020-6376. The vulnerability affects the application's input validation mechanisms (NVD).

The vulnerability is caused by improper input validation in the SAP 3D Visual Enterprise Viewer application. It has been assigned a CVSS v3.1 base score of 5.5 (Medium) and a CVSS v2.0 base score of 4.3 (Medium). The vulnerability is classified under CWE-20 (Improper Input Validation) (NVD).

When exploited, this vulnerability results in the application crashing and becoming temporarily unavailable until the user restarts the application. This creates a denial of service condition that affects the availability of the system (NVD).

The vulnerability requires user interaction, as it can only be triggered when a user opens a specially crafted Right Hemisphere Binary (.rh) file received from untrusted sources (NVD).

Users should apply the security patches provided by SAP through their security advisory. The fix is available through SAP Security Note 2973497 (SAP Advisory).