CVE-2021-46653

Bentley View 10.15.0.75 is affected by a heap-based buffer overflow in BMP image parsing due to insufficient validation of the length of user-supplied data. This allows remote attackers to execute arbitrary code in the context of the current process, with user interaction required (target must vi...

CVE-2021-46652

The CVE-2021-46652 entry concerns Bentley View 10.15.0.75 with a vulnerability in DGN file parsing. The underlying flaw is an out-of-bounds write (-write past the end of an allocated buffer-) triggered by crafted DGN data, enabling arbitrary code execution in the context of the current process. E...

CVE-2021-46650

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2021-46648

Bentley MicroStation CONNECT 10.16.0.80 is affected by a heap-based buffer overflow in DGN file parsing due to improper validation of the length of user-supplied data. This allows remote code execution in the context of the current process, with exploitation requiring user interaction (target mus...

CVE-2021-46647

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46646

CVE-2021-46646 affects Bentley MicroStation CONNECT 10.16.0.80. The issue is an out-of-bounds write in the DGN file parser, allowing code execution in the context of the current process. Exploitation requires user interaction (visiting a malicious page or opening a malicious file) and crafted DGN...

CVE-2021-46645

CVE-2021-46645 affects Bentley MicroStation CONNECT 10.16.0.80. The vulnerability resides in BMP image parsing, where crafted BMP data can trigger a write past the end of an allocated buffer, allowing remote code execution in the context of the current process. User interaction is required (targe...

CVE-2021-46644

Bentley MicroStation CONNECT 10.16.0.80 is affected by an out-of-bounds write vulnerability in DGN file parsing. The flaw allows remote code execution via crafted DGN data that triggers a write past the end of an allocated buffer; user interaction is required (visit a malicious page or open a mal...

CVE-2021-46643

CVE-2021-46643 affects Bentley View 10.15.0.75. The vulnerability arises in the DGN file parsing code due to lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer, enabling remote code execution. Exploitation requires user interaction (visiting ...

CVE-2021-46642

Bentley View 10.15.0.75 is affected by a DGN file parsing flaw that allows an out-of-bounds read, leading to information disclosure. The issue stems from insufficient validation of user-supplied data during DGN parsing, enabling a remote attacker to read past the end of an allocated buffer. Explo...

CVE-2021-46641

Bentley View 10.15.0.75 is affected by a DGN file parsing vulnerability. Crafted DNG data can trigger a read past the end of an allocated buffer, enabling remote code execution in the current process. User interaction is required (visiting a malicious page or opening a malicious file). No specifi...

CVE-2021-46639

CVE-2021-46639 affects Bentley MicroStation CONNECT 10.16.0.80. Connected sources (ZDI-22-226 and related notices) describe an out-of-bounds write in DGN file parsing that can allow remote code execution; exploitation requires user interaction (visiting malicious page or opening a malicious file)...

CVE-2021-46638

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46636

Bentley MicroStation CONNECT 10.16.0.80 contains a DGN file parsing buffer-overread flaw that can allow remote code execution. Attacker must entice a user to open a malicious page/file; code runs in the target process. References: ZDI-22-223, BE-2021-0009. No patch/version details provided.

CVE-2021-46635

Bentley MicroStation CONNECT 10.16.0.80 is affected by a buffer overrun in the DGN file parser. Crafted DGN data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process after the user visits a malicious page or opens a maliciou...

CVE-2021-46633

CVE-2021-46633 affects Bentley MicroStation CONNECT 10.16.0.80. The root cause is improper validation of an object before operations during PDF parsing, enabling an attacker to execute arbitrary code in the current process. Requires user interaction (visiting a malicious page or opening a crafted...

CVE-2021-46633

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46632

CVE-2021-46632 affects Bentley View 10.15.0.75. The bug resides in JP2 image parsing and stems from improper validation, causing a read past end of allocated buffer. This can enable information disclosure and, in conjunction with other flaws, may allow arbitrary code execution in the current proc...

CVE-2021-46632

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-46631

Bentley View 10.15.0.75 is affected by a remote code execution vulnerability in TIF image parsing. The root cause is uninitialized memory access during parsing, allowing an attacker to execute code in the process context when a user visits a malicious page or opens a crafted file. Multiple source...