CVE-2021-27587: 
SAP 3D Visual Enterprise Viewer vulnerability analysis and mitigation

CVE-2021-27587 affects SAP 3D Visual Enterprise Viewer version 9, where users opening manipulated Jupiter Tessellation (.JT) format files from untrusted sources can cause the application to crash and become temporarily unavailable until restart. The vulnerability was discovered in early 2021 and was publicly disclosed on March 15, 2021 (ZDI Advisory).

The vulnerability stems from two distinct issues in the JT file parsing mechanism: a null pointer dereference and an out-of-bounds write condition. The first issue results from improper initialization of a pointer before accessing it, while the second involves inadequate validation of user-supplied data, leading to a write operation before the start of an allocated data structure. The vulnerability has received a CVSS v3.1 base score of 7.8 (HIGH) with the vector string AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (ZDI Advisory).

When successfully exploited, this vulnerability allows remote attackers to execute arbitrary code in the context of the current process. The attack requires user interaction, specifically opening a malicious file or visiting a malicious page. The immediate impact results in application crashes and temporary unavailability of the service until the application is restarted (NVD).

The vulnerability requires user interaction to be exploited, where the target must either visit a malicious page or open a malicious file. The attack vector is local (AV:L), with low attack complexity (AC:L), requiring no privileges (PR:N) but user interaction (UI:R) (ZDI Advisory).

The vulnerability has been fixed in SAP 3D Visual Enterprise Viewer 9.0 FP10 MP2. Users are advised to upgrade to this version or later to mitigate the risk (ZDI Advisory).