Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-101867
HistoryDec 12, 2021 - 12:00 a.m.

Bentley View BMP File Parsing Stack Buffer Overflow Vulnerability

2021-12-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
bentley view
buffer overflow
bmp file parsing
bentley systems
inc.
heap buffer
vulnerability
user-supplied data
code execution
current process
cnvd

EPSS

0.003

Percentile

66.5%

Bentley View, a free viewer from Bentley Systems, Inc. A stack buffer overflow vulnerability exists in Bentley View BMP file parsing, which is due to a failure to properly validate the length of user-supplied data before copying it to the heap buffer. An attacker could exploit this vulnerability to execute code in the context of the current process.

EPSS

0.003

Percentile

66.5%

Related for CNVD-2021-101867