SUSE SLED15 / SLES15 Security Update : SDL2 (SUSE-SU-2022:0104-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0104-1 advisory. - CVE-2020-14409: Fixed Integer Overflow resulting in heap corruption in SDLBlitCopy in video/SDLblitcopy.c vi...

Heap overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34907

Summary: CVE-2021-34907 affects Bentley View 10.15.0.75. The issue is in BMP file parsing, caused by lack of proper validation of the length of user-supplied data before copying into a heap-based buffer, enabling remote code execution with the attacker’s interaction on a malicious BMP/page. The v...

CVE-2021-34903

Bentley View 10.15.0.75 is affected by a BMP file parsing flaw that can trigger an out-of-bounds write, allowing remote code execution in the target process. The vulnerability arises when crafted BMP data causes a write past the end of an allocated buffer. Exploitation requires user interaction (...

CVE-2021-34896

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-43579

A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...

Stack overflow

A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...

CVE-2021-43579

A stack-based buffer overflow in imageloadbmp in HTMLDOC = 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file...

CVE-2021-44422

An Improper Input Validation Vulnerability exists when reading a BMP file using Open Design Alliance Drawings SDK before 2022.12. Crafted data in a BMP file can trigger a write operation past the end of an allocated buffer, or lead to a heap-based buffer overflow. An attacker can leverage this...

CVE-2021-44423

An out-of-bounds read vulnerability exists when reading a BMP file using Open Design Alliance ODA Drawings Explorer before 2022.12. The specific issue exists after loading BMP files. Unchecked input data from a crafted BMP file leads to an out-of-bounds read. An attacker can leverage this...

Heap overflow

An Improper Input Validation Vulnerability exists when reading a BMP file using Open Design Alliance Drawings SDK before 2022.12. Crafted data in a BMP file can trigger a write operation past the end of an allocated buffer, or lead to a heap-based buffer overflow. An attacker can leverage this...

Out-of-bounds

An out-of-bounds read vulnerability exists when reading a BMP file using Open Design Alliance ODA Drawings Explorer before 2022.12. The specific issue exists after loading BMP files. Unchecked input data from a crafted BMP file leads to an out-of-bounds read. An attacker can leverage this...

CVE-2021-44423

CVE-2021-44423 affects Open Design Alliance (ODA) Drawings Explorer/SDK. The vulnerability is an out-of-bounds read triggered while parsing BMP files after loading them, caused by unchecked input data in BMP handling. An attacker could potentially execute code in the current process context. Publ...

CVE-2021-44422

An Improper Input Validation Vulnerability exists when reading a BMP file using Open Design Alliance Drawings SDK before 2022.12. Crafted data in a BMP file can trigger a write operation past the end of an allocated buffer, or lead to a heap-based buffer overflow. An attacker can leverage this...

CVE-2021-44422

CVE-2021-44422 concerns Open Design Alliance Drawings SDK/Drawings Explorer. The vulnerability arises from improper input validation during BMP parsing: lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. This can trigger a write past the end ...

Open Design Alliance (ODA) Drawings Explorer BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

Open Design Alliance (ODA) Drawings Explorer BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...

Bentley View BMP File Parsing Heap Buffer Overflow Remote Code Execution Vulnerability

A security vulnerability exists in Bentley View, a free viewer from Bentley Systems, U.S.A. The Bentley View BMP file parsing vulnerability is due to a failure to properly validate the length of user-supplied data before copying it to a heap buffer. An attacker could exploit this vulnerability to...

Bentley View BMP File Parsing Heap Buffer Overflow Remote Code Execution Vulnerability (CNVD-2021-102036)

Bentley View is a free viewer from Bentley Systems, Inc. Bentley View BMP file parsing heap buffer overflow remote code execution vulnerability is due to a failure to properly validate the length of user-supplied data before copying it to the heap buffer. An attacker could exploit this...

Bentley View BMP File Parsing Out-of-Bounds Writing Vulnerability

Bentley View is a free viewer from Bentley Systems, Inc. An out-of-bounds write vulnerability exists in Bentley View BMP file parsing, which stems from the fact that data created in a DBMP file can trigger a write operation beyond the end of the allocated buffer. An attacker could exploit this...