CVE-2021-34914

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34914

Bentley View 10.15.0.75 is affected by a DGN file parsing vulnerability that can trigger an out-of-bounds write. A crafted DGN file (or malicious page/file) may allow an attacker to execute code in the process context, with user interaction required to exploit. Root cause is a write past the end ...

CVE-2021-34913

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34912

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34912

CVE-2021-34912 affects Bentley View 10.15.0.75. The vulnerability arises in the JT file parsing code, where crafted JT data can trigger a read past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (the tar...

CVE-2021-34911

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34911

Bentley View 10.15.0.75 is affected by a vulnerability in 3DS file parsing that stems from not validating the existence of an object before operations, enabling potential remote code execution. The issue is documented across multiple sources (ZDI-21-1500, NVD, Red Hat, CNVD/CNNVD-style records) a...

CVE-2021-34910

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-34909

Bentley View 10.15.0.75 is affected by CVE-2021-34909 due to a parsing flaw in JT files that fails to validate object existence before operations, enabling remote code execution via crafted JT content. The attack requires user interaction (visiting a malicious page or opening a malicious file). T...

CVE-2021-34908

Bentley View 10.15.0.75 is affected by CVE-2021-34908. The issue arises in the parsing of J2K files where the attacker does not validate the existence of an object before performing operations, leading to remote code execution. Exploitation requires user interaction (e.g., visiting a malicious pa...

CVE-2021-34907

Summary: CVE-2021-34907 affects Bentley View 10.15.0.75. The issue is in BMP file parsing, caused by lack of proper validation of the length of user-supplied data before copying into a heap-based buffer, enabling remote code execution with the attacker’s interaction on a malicious BMP/page. The v...

CVE-2021-34906

CVE-2021-34906 affects Bentley View 10.15.0.75. The issue arises in J2K file parsing due to failing to validate object existence before operations, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a malicious page or opening a ...

CVE-2021-34905

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34905

Bentley View 10.15.0.75 is affected by CVE-2021-34905 due to a heap-based buffer overflow in DGN file parsing. The flaw stems from insufficient validation of the length of user-supplied data prior to copying it, allowing remote code execution when a user opens a malicious DGN or visits a crafted ...

CVE-2021-34902

CVE-2021-34902 affects Bentley View 10.15.0.75. The flaw is in DWG file parsing, arising from insufficient validation that allows an out-of-bounds read (read past the end of an allocated object). This can lead to sensitive information disclosure. Exploitation requires user interaction (target mus...

CVE-2021-34902

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-34901

Bentley View 10.15.0.75 is affected by CVE-2021-34901 due to a parsing flaw in 3DS files. The vulnerability causes an out-of-bounds read of data past the end of an allocated buffer, with exploitation requiring user interaction (target must visit a malicious page or open a malicious file). The iss...

CVE-2021-34901

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-34900

Bentley View 10.15.0.75 is affected by CVE-2021-34900. The flaw is in J2K file parsing and stems from failing to validate the length of user-supplied data before copying into a heap buffer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or openin...

CVE-2021-34899

Bentley View 10.15.0.75 is vulnerable to a remote code execution through out-of-bounds writes while parsing JT files. Crafted JT data can trigger a write past the end of an allocated buffer, allowing an attacker to execute code in the context of the victim process. User interaction is required (v...