CVE-2021-27640: 
SAP 3D Visual Enterprise Viewer vulnerability analysis and mitigation

SAP 3D Visual Enterprise Viewer version 9 contains a vulnerability (CVE-2021-27640) that was disclosed on June 9, 2021. The vulnerability allows users to open manipulated PSD files received from untrusted sources, which can result in the application crashing and becoming temporarily unavailable until restart. This issue stems from improper input validation (NVD).

The vulnerability is classified as an Improper Input Validation (CWE-20) issue. It has received a CVSS v3.1 base score of 5.5 (Medium) from NVD with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H, while SAP SE assigned it a CVSS score of 4.3 (Medium) with vector string CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L (NVD).

When exploited, the vulnerability causes the SAP 3D Visual Enterprise Viewer application to crash and become temporarily unavailable. The service remains unavailable until the user manually restarts the application. There is no reported impact on data confidentiality or integrity (NVD).

SAP has released security patches to address this vulnerability. Users should refer to SAP Security Note 3059999 for detailed mitigation instructions (SAP Advisory).