CVE-2021-34898

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34897

Bentley View 10.15.0.75 is affected by CVE-2021-34897 due to an out-of-bounds write in DGN file parsing. Crafted DGN data can trigger a write past the end of an allocated buffer, allowing an attacker to execute code in the context of the current process. Exploitation requires user interaction (vi...

CVE-2021-34896

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34896

CVE-2021-34896 affects Bentley View 10.15.0.75 and is caused by improper validation of the length of user-supplied data during BMP file parsing, leading to a heap-based buffer overflow. The vulnerability allows an attacker to execute arbitrary code in the context of the current process after the ...

CVE-2021-34895

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34895

Bentley View 3DS file parsing vulnerability (CVE-2021-34895) allows remote code execution by exploiting a use-after-free/object- existence check flaw. Affected product/version: Bentley View 10.15.0.75. Attack requires user interaction (target visits a malicious page or opens a malicious file). Ro...

CVE-2021-34894

CVE-2021-34894 affects Bentley View 10.15.0.75, with a flaw in 3DS file parsing where the code fails to validate an object before operating on it. The vulnerability can enable remote code execution in the context of the current process when a user opens a crafted 3DS file (use-after-free-like beh...

CVE-2021-34894

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34893

CVE-2021-34893 affects Bentley View 10.15.0.75. The flaw is in BMP file parsing where the length of user-supplied data is not properly validated before copying to a heap-based buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (vis...

CVE-2021-34893

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34892

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34892

Bentley View vulnerability CVE-2021-34892 affects Bentley View 10.15.0.75 and stems from improper validation of the length of user-supplied data during JT file parsing, leading to a stack-based buffer overflow and remote code execution. Exploitation requires user interaction (visiting a malicious...

CVE-2021-34891

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34890

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-34890

Bentley View 10.15.0.75 is affected by CVE-2021-34890 due to an out-of-bounds read in JT file parsing, caused by insufficient input validation. This enables information disclosure and, with further vulnerabilities, may allow arbitrary code execution in the target process. Affected users should ap...

CVE-2021-34889

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-34889

Bentley View 10.15.0.75 is affected by a 3DS file parsing vulnerability described as an out-of-bounds/read-past-end condition. The flaw stems from insufficient validation of user-supplied data during 3DS parsing, allowing information disclosure and, in conjunction with other vulnerabilities, pote...

CVE-2021-34888

Bentley View 10.15.0.75 is affected by CVE-2021-34888 via a vulnerability in JT file parsing. The flaw stems from improper validation of user-supplied data, causing a read past the end of an allocated buffer and enabling information disclosure; it could be leveraged with other flaws to execute ar...

CVE-2021-34886

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-34886

Bentley View 10.15.0.75 is affected by CVE-2021-34886. The issue lies in FBX file parsing where the code does not validate the existence of an object before performing operations, enabling information disclosure. Multiple sources (NVD, Red Hat, CVE records, ZDI advisory) describe this as a use-af...