CVE-2021-34885

Bentley View 10.15.0.75 is affected by a JT file parsing out-of-bounds read that allows remote code execution. Exploitation requires user interaction (visit a malicious page/open a malicious JT file). The issue is documented via ZDI-21-1474 (referred to as ZDI-CAN-14838). Mitigation: Bentley rele...

CVE-2021-34884

Bentley View 10.15.0.75 is affected by a JP2 file parsing vulnerability. The root cause is a use-after-release style flaw where the parser does not validate the existence of an object before performing operations, enabling information disclosure. The ZDI advisory (ZDI-21-1473) confirms this as a ...

CVE-2021-34884

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-34883

Bentley View 10.15.0.75 is affected by CVE-2021-34883 due to a flaw in J2K file parsing. The issue stems from insufficient validation of user-supplied data, causing a read past the end of an allocated buffer and leading to sensitive information disclosure. Successful exploitation requires user in...

CVE-2021-34883

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-34882

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-34881

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-34881

Bentley View 10.15.0.75 is affected by a vulnerability in OBJ file parsing that allows information disclosure through an out-of-bounds read. The issue stems from insufficient validation of user-supplied data, potentially enabling an attacker to read beyond allocated buffers. Exploitation requires...

CVE-2021-34880

Bentley View 10.15.0.75 is affected by CVE-2021-34880 due to a flaw in 3DS file parsing that can trigger a read past the end of an allocated buffer. This enables remote code execution in the context of the current process and requires user interaction (visiting a malicious page or opening a malic...

CVE-2021-34879

Bentley View 10.15.0.75 is affected by a J2K File Parsing vulnerability (memory misreference/use-after-free) that allows code execution. The issue arises from not validating the existence of an object before performing operations during J2K parsing, enabling an attacker to execute code with the c...

CVE-2021-34877

Bentley View 10.15.0.75 is affected by CVE-2021-34877 due to an out-of-bounds write in JT file parsing. A crafted JT file can trigger code execution in the current process, requiring user interaction (visiting a malicious page or opening a malicious file). Related disclosures (ZDI-21-1465, CNVD/C...

CVE-2021-34875

CVE-2021-34875 concerns Bentley View 10.15.0.75 where the 3DS file parser contains an out-of-bounds write vulnerability. Crafted 3DS data can trigger a write past the end of an allocated buffer, enabling arbitrary code execution in the context of the affected process. Several sources confirm this...

CVE-2021-34875

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34874

CVE-2021-34874 affects Bentley View 10.15.0.75. The issue is a memory corruption vulnerability in the 3DS file parsing path caused by insufficient validation of user-supplied data. This can lead to arbitrary code execution in the current process when a target visits a malicious page or opens a cr...

CVE-2021-34873

CVE-2021-34873 (Bentley View) affects Bentley View 10.15.0.75. The flaw is in the PDF parsing code and is an out-of-bounds write triggered by crafted PDF data, allowing an attacker to run code in the context of the current process. Exploitation requires user interaction (target must visit a malic...

CVE-2021-34872

CVE-2021-34872 affects Bentley View 10.15.0.75 via SKP file parsing. The flaw is a memory/object-usage issue from not validating an object’s existence before operations, enabling remote code execution when a user visits a malicious page or opens a malicious SKP-containing file. ZDI-21-1462 descri...

CVE-2021-34872

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34871

Bentley View 10.15.0.75 is affected by a BMP file parsing flaw leading to a heap-based buffer overflow, enabling remote code execution with user interaction (visiting a malicious page or opening a malicious file). The issue stems from inadequate validation of the length of user-supplied data befo...

CVE-2021-34858

CVE-2021-34858 affects TeamViewer. The flaw resides in TVS file parsing and stems from insufficient validation of user-supplied data, enabling an out-of-bounds read that can let an attacker execute code in the target process. Public sources describe remote code execution with user interaction req...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2021-2818)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...