425 matches found
Design/Logic Flaw
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
Design/Logic Flaw
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34911
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34911
Bentley View 10.15.0.75 is affected by a vulnerability in 3DS file parsing that stems from not validating the existence of an object before operations, enabling potential remote code execution. The issue is documented across multiple sources (ZDI-21-1500, NVD, Red Hat, CNVD/CNNVD-style records) a...
CVE-2021-34901
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...
CVE-2021-34901
Bentley View 10.15.0.75 is affected by CVE-2021-34901 due to a parsing flaw in 3DS files. The vulnerability causes an out-of-bounds read of data past the end of an allocated buffer, with exploitation requiring user interaction (target must visit a malicious page or open a malicious file). The iss...
CVE-2021-34895
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34895
Bentley View 3DS file parsing vulnerability (CVE-2021-34895) allows remote code execution by exploiting a use-after-free/object- existence check flaw. Affected product/version: Bentley View 10.15.0.75. Attack requires user interaction (target visits a malicious page or opens a malicious file). Ro...
CVE-2021-34894
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34894
CVE-2021-34894 affects Bentley View 10.15.0.75, with a flaw in 3DS file parsing where the code fails to validate an object before operating on it. The vulnerability can enable remote code execution in the context of the current process when a user opens a crafted 3DS file (use-after-free-like beh...
CVE-2021-34889
Bentley View 10.15.0.75 is affected by a 3DS file parsing vulnerability described as an out-of-bounds/read-past-end condition. The flaw stems from insufficient validation of user-supplied data during 3DS parsing, allowing information disclosure and, in conjunction with other vulnerabilities, pote...
CVE-2021-34889
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...
CVE-2021-34880
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34880
Bentley View 10.15.0.75 is affected by CVE-2021-34880 due to a flaw in 3DS file parsing that can trigger a read past the end of an allocated buffer. This enables remote code execution in the context of the current process and requires user interaction (visiting a malicious page or opening a malic...
CVE-2021-34875
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34875
CVE-2021-34875 concerns Bentley View 10.15.0.75 where the 3DS file parser contains an out-of-bounds write vulnerability. Crafted 3DS data can trigger a write past the end of an allocated buffer, enabling arbitrary code execution in the context of the affected process. Several sources confirm this...
CVE-2021-34874
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2021-34874
CVE-2021-34874 affects Bentley View 10.15.0.75. The issue is a memory corruption vulnerability in the 3DS file parsing path caused by insufficient validation of user-supplied data. This can lead to arbitrary code execution in the current process when a target visits a malicious page or opens a cr...
CVE-2021-34911: Use After Free
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34901: Out-of-bounds Read
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...