CVE-2021-46647

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46647

The CVE-2021-46647 entry concerns Bentley MicroStation CONNECT (10.16.0.80). The vulnerability is a heap-based buffer overflow during BMP image parsing caused by insufficient validation of the length of user-supplied data prior to copying it into a heap buffer. This flaw can allow an attacker to ...

CVE-2021-46645

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46645

CVE-2021-46645 affects Bentley MicroStation CONNECT 10.16.0.80. The vulnerability resides in BMP image parsing, where crafted BMP data can trigger a write past the end of an allocated buffer, allowing remote code execution in the context of the current process. User interaction is required (targe...

CVE-2021-46629

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-46629

CVE-2021-46629 affects Bentley View 10.15.0.75 and is due to improper validation in BMP image parsing, causing a read past the end of an allocated buffer. This can lead to information disclosure and, when combined with other vulnerabilities, potential arbitrary code execution in the context of th...

CVE-2021-46628

Summary: CVE-2021-46628 affects Bentley View; BMP image parsing flaw allows reading past end of a buffer, enabling information disclosure and potentially code execution in the context of the target process. The issue requires user interaction (target must visit a malicious page or open a maliciou...

CVE-2021-46616

Bentley MicroStation CONNECT 10.16.0.80 is affected by a BMP image parsing flaw that can cause an out-of-bounds read in the parsing code. The issue, triggered by processing a malicious BMP, allows disclosure of sensitive data and can enable arbitrary code execution in the context of the current p...

CVE-2021-46616

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2021-46615

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2021-46615

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46615 due to a parsing flaw in BMP image handling. The root cause is inadequate validation of user-supplied data, leading to a read past the end of an allocated buffer, which can disclose sensitive information. In conjunction with ot...

CVE-2021-46606

CVE-2021-46606 affects Bentley MicroStation CONNECT 10.16.0.80. The issue is a heap-based buffer overflow in BMP image parsing due to improper validation of the length of user-supplied data, allowing remote code execution. Attack requires user interaction (visiting a malicious page or opening a m...

CVE-2021-46606

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46605

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46605

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46605. The issue is a BMP image parsing heap-based overflow caused by insufficient validation of the length of user-supplied data before copying it to a heap buffer, enabling remote code execution. Exploitation requires user interact...

CVE-2021-46645: Out-of-bounds Write

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46647: Heap-based Buffer Overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46616: Out-of-bounds Read

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2021-46605: Heap-based Buffer Overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46615: Out-of-bounds Read

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...