CVE-2021-46620

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2021-46620

CVE-2021-46620 affects Bentley MicroStation CONNECT 10.16.0.80. The connected ZDI advisory (ZDI-22-207) describes a vulnerability in FBX file parsing where improper validation can cause a read past the end of an allocated buffer. This results in an information disclosure vulnerability; exploitati...

CVE-2021-46619

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46619

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46619 due to an out-of-bounds read during PDF parsing, enabling remote code execution when a user opens a malicious PDF or visits a crafted page/file. The vulnerability requires user interaction. Reports and advisories (e.g., ZDI-22-...

CVE-2021-46618

CVE-2021-46618 affects Bentley MicroStation CONNECT 10.16.0.80. The issue is a parsing flaw in PNG handling that leads to a read past the end of an allocated buffer due to insufficient validation of user-supplied data. Exploitation requires user interaction (target must visit a malicious page or ...

CVE-2021-46617

CVE-2021-46617 affects Bentley MicroStation CONNECT 10.16.0.80. The vulnerability is in the parsing of TIF images and stems from the lack of proper initialization of memory prior to access, enabling an attacker to execute code in the context of the current process . This requires user interaction...

CVE-2021-46616

Bentley MicroStation CONNECT 10.16.0.80 is affected by a BMP image parsing flaw that can cause an out-of-bounds read in the parsing code. The issue, triggered by processing a malicious BMP, allows disclosure of sensitive data and can enable arbitrary code execution in the context of the current p...

CVE-2021-46616

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2021-46615

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46615 due to a parsing flaw in BMP image handling. The root cause is inadequate validation of user-supplied data, leading to a read past the end of an allocated buffer, which can disclose sensitive information. In conjunction with ot...

CVE-2021-46614

CVE-2021-46614 concerns Bentley MicroStation CONNECT 10.16.0.80, where the vulnerability arises in the parsing of J2K images. The underlying flaw is an out-of-bounds read that can be triggered by crafted J2K data, allowing an attacker to execute arbitrary code in the context of the affected proce...

CVE-2021-46613

CVE-2021-46613 affects Bentley MicroStation CONNECT 10.16.0.80. The issue is a use-after-free in DXF file parsing caused by not validating the existence of an object before operations, enabling remote code execution. Exploitation requires user interaction (target visits a hostile page or opens a ...

CVE-2021-46612

CVE-2021-46612 affects Bentley MicroStation CONNECT 10.16.0.80. The vulnerability lies in PDF file parsing, where crafted data can trigger a read past the end of an allocated buffer, enabling remote code execution in the process context. Exploitation requires user interaction (visiting a maliciou...

CVE-2021-46611

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2021-46611

CVE-2021-46611 affects Bentley MicroStation CONNECT 10.16.0.80. The issue is a JP2 image parsing flaw caused by insufficient validation, leading to a read past the end of an allocated buffer. This can enable an attacker to disclose sensitive information and, per the CVE entry, may be leveraged (i...

CVE-2021-46610

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46610. The vulnerability arises in the JT file parsing due to insufficient validation, causing a read past the end of an allocated buffer and enabling information disclosure. Exploitation requires user interaction (visiting a malicio...

CVE-2021-46608

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2021-46607

Bentley MicroStation CONNECT 10.16.0.80 is affected by a 3DS file parsing vulnerability that can disclose sensitive information. The flaw arises from insufficient validation during 3DS data processing, causing an out-of-bounds read and potential information disclosure. Exploitation requires user ...

CVE-2021-46606

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46605

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46605

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46605. The issue is a BMP image parsing heap-based overflow caused by insufficient validation of the length of user-supplied data before copying it to a heap buffer, enabling remote code execution. Exploitation requires user interact...