CVE-2021-40826

Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsing functionality at clementine+0x3aa207. The vulnerability is triggered when the user opens a crafted MP3 file or loads a remote stream URL that is mishandled by Clementine...

CVE-2021-40826

Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsing functionality at clementine+0x3aa207. The vulnerability is triggered when the user opens a crafted MP3 file or loads a remote stream URL that is mishandled by Clementine...

CVE-2021-40826

Clementine Music Player through 1.3.1 is vulnerable to a User Mode Write Access Violation, affecting the MP3 file parsing functionality at clementine+0x3aa207. The vulnerability is triggered when the user opens a crafted MP3 file or loads a remote stream URL that is mishandled by Clementine...

Bentley View JT File Parsing Out-of-Bounds Write Remote Code Execution Vulnerability (CNVD-2021-102022)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View JT file parsing, which can be exploited by attackers to execute code in the context of the current process...

Bentley View 3DS File Parsing Out-of-Bounds Read Remote Code Execution Vulnerability

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View 3DS file parsing, which can be exploited by attackers to execute code in the context of the current process...

Bentley View JT File Parsing Out-of-Bounds Write Remote Code Execution Vulnerability (CNVD-2021-102020)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View JT file parsing, which can be exploited by attackers to execute code in the context of the current process...

Simcenter STAR-CCM+ Viewer File Parsing Vulnerability

Simcenter STAR-CCM+ is a multi-physics computational fluid dynamics CFD software for simulation and Simcenter STAR-CCM+ Viewer is a lightweight viewer. The Simcenter STAR-CCM+ Viewer file parsing vulnerability can be exploited by an attacker to execute code in the context of the current process...

File parsing vulnerability in JT Utilities and JTTK (CNVD-2021-100373)

JT is a publicly available data format developed by Siemens Digital Industry Software and is widely used for communication, visualization, numerical modeling, etc. The JT Utility provides a series of command line utilities that can be used to support application development and reuse of JT. The J...

Bentley View JT File Parsing Out-of-Bounds Write Remote Code Execution Vulnerability (CNVD-2021-102021)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View JT file parsing, which can be exploited by attackers to execute code in the context of the current process...

Bentley View JT File Parsing Out-of-Bounds Read Remote Code Execution Vulnerability (CNVD-2021-102017)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View JT file parsing, which can be exploited by attackers to execute code in the context of the current process...

Bentley View 3DS File Parsing Out-of-Bounds Write Remote Code Execution Vulnerability

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View 3DS file parsing, which can be exploited by attackers to execute code in the context of the current process...

CVE-2021-44433

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products contains a use after free vulnerability that could be triggered while parsing specially crafted JT files. An attacker could leverage this vulnerability to...

CVE-2021-44438

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products is vulnerable to an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execu...

CVE-2021-44442

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted JT files. This could allow an attacker to execute code...

CVE-2021-44449

A vulnerability has been identified in JT Utilities All versions V12.8.1.1, JTTK All versions V10.8.1.1. JTTK library in affected products contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code ...

CVE-2021-44443

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code ...

CVE-2021-44430

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products is vulnerable to an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execu...

CVE-2021-44009

A vulnerability has been identified in JT2Go All versions V13.2.0.5, Teamcenter Visualization All versions V13.2.0.5. The TiffLoader.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing TIFF files. An attacker could leverage this vulnerability to leak...

CVE-2021-44015

A vulnerability has been identified in JT2Go All versions V13.2.0.5, Teamcenter Visualization All versions V13.2.0.5. The VCRUNTIME140.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted CGM files. An attacker could leverage this...

CVE-2021-44013

A vulnerability has been identified in JT2Go All versions V13.2.0.5, Teamcenter Visualization All versions V13.2.0.5. The DL180pdfl.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in...