CVE-2021-34943

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-34942

CVE-2021-34942 affects Bentley View (bounded by JT-file parsing). The flaw is an out-of-bounds read while parsing JT data, enabling arbitrary code execution in the process of Bentley View 10.15.0.75 when a user opens a malicious JT file or visits a malicious page. Exploitation requires user inter...

CVE-2021-34942

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34941

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34941

Bentley View vulnerable to a stack-based buffer overflow in JT file parsing (CVE-2021-34941). Affected product: Bentley View 10.15.0.75. Root cause: improper validation of the length of untrusted JT-file data prior to copying to a stack-based buffer, enabling remote code execution in the context ...

CVE-2021-34940

CVE-2021-34940 affects Bentley View 10.15.0.75 and is caused by an out-of-bounds write in the parsing of JT files. This could allow remote code execution in the context of the current process, with user interaction required (the target must open a malicious JT file or visit a malicious page). Con...

CVE-2021-34940

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34939

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34939

Bentley View 10.15.0.75 is affected by a JT-file parsing vulnerability leading to remote code execution. The root cause is a memory/object handling flaw where the code does not validate the existence of an object before performing operations, enabling an attacker to run arbitrary code in the targ...

CVE-2021-34938

Bentley View 10.15.0.75 is affected by a heap-based buffer overflow in JT file parsing, caused by improper validation of user-supplied data length. This allows remote code execution and requires user interaction (visiting a malicious page or opening a crafted file). The vulnerability is associate...

CVE-2021-34937

Bentley View 10.15.0.75 is affected by CVE-2021-34937 due to a JT file parsing flaw that does not validate object existence before operating on it, enabling remote code execution with user interaction (the target must open a malicious file/page). The issue is described as a use-after-free-like co...

CVE-2021-34937

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34936

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34934

CVE-2021-34934 affects Bentley View 10.15.0.75, with a vulnerability in the parsing of JT files that can cause memory corruption and allow to execute code in the target process. The attack requires user interaction (visiting a malicious page or opening a malicious file). Several connected sources...

CVE-2021-34933

CVE-2021-34933 affects Bentley View 10.15.0.75 and is a use-after-free/invalid object handling issue in JT file parsing that allows remote code execution. The flaw stems from not validating the existence of an object before performing operations, enabling an attacker to execute code in the curren...

CVE-2021-34933

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34932

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34932

This CVE affects Bentley View 10.15.0.75, where JT file parsing can trigger a write past the end of an allocated buffer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious JT file). Reported as ZDI-14910; fixes are available in...

CVE-2021-34931

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34931

CVE-2021-34931 affects Bentley View 10.15.0.75 and relates to parsing JT files. The root cause is a failure to validate the existence of an object before performing operations, enabling a use-after-free style condition that can lead to remote code execution. Exploitation requires user interaction...