594 matches found
CVE-2021-34930
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34930
The CVE-2021-34930 issue affects Bentley View (e.g., version 10.15.0.75) and arises from parsing JT files. The root cause is a read past the end of an allocated buffer in the JT file parser, enabling remote code execution in the current process with user interaction required (the user must open a...
CVE-2021-34929
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34929
Bentley View 10.15.0.75 is affected by CVE-2021-34929 due to an out-of-bounds write in parsing JT files, which can lead to remote code execution when a user opens a crafted JT file or visits a malicious page. The vulnerability allows code execution in the context of the current process and requir...
CVE-2021-34928
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34928
CVE-2021-34928 affects Bentley View 10.15.0.75. The vulnerability is in the parsing of JT files and stems from a write past the end of an allocated buffer, enabling remote code execution. Exploitation requires user interaction (the target must visit a malicious page or open a malicious file). Sev...
CVE-2021-34927
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34927
CVE-2021-34927 affects Bentley View 10.15.0.75 and is due to a flawed JT file parsing that can trigger a read past the end of an allocated buffer, allowing remote code execution. Exploitation requires user interaction (target must open a malicious JT file or visit a crafted page). Multiple source...
CVE-2021-34926
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34926
CVE-2021-34926 (Bentley View) affects Bentley View 10.15.0.75, where the flaw lies in parsing of JT files. Crafted JT data can trigger an out‑of‑bounds write, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a malicious page or...
CVE-2021-34925
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34925
Bentley View 10.15.0.75 is affected by CVE-2021-34925 due to a stack-based buffer overflow in JT file parsing from improper length validation of user-supplied data, allowing remote code execution after user interaction (visiting a malicious page or opening a malicious JT file). Root cause: lack o...
CVE-2021-34924
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34924
Bentley View 10.15.0.75 is affected by a JT file parsing flaw that can cause out-of-bounds writes, enabling remote code execution with user interaction (open a malicious JT file). Multiple sources (ZDI-21-1512, CNVD/CNNVD, Red Hat, NVD) confirm the vulnerability and its write-past-end condition i...
CVE-2021-34923
Bentley View 10.15.0.75 is affected by an out-of-bounds write during JT file parsing, allowing arbitrary code execution with user interaction (open a malicious JT file or page). Root cause: write past end of allocated buffer in JT parsing. Exploitation details and affected versioning are supporte...
CVE-2021-34922
Bentley View 10.15.0.75 is affected by a JT file parsing flaw that leads to use-after-free and remote code execution. Attack requires user interaction (open a malicious JT file/page); no remote exploit without user action. Root cause: object existence not validated during JT parsing, enabling arb...
CVE-2021-34922
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34921
CVE-2021-34921 affects Bentley View 10.15.0.75. The flaw is an out-of-bounds write during JT file parsing, enabling remote code execution when a user opens a malicious JT file or visits a crafted page. User interaction is required. Several sources (ZDI-21-1509; Red Hat RH/CVE entry; CNVD; CNNC; N...
CVE-2021-34920
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34920
Bentley View 10.15.0.75 is affected by CVE-2021-34920 due to an out-of-bounds write in the JT file parser, enabling remote code execution. The flaw arises when parsing JT files; crafted JT data can trigger a write past the end of an allocated buffer, allowing code to run in the context of the cur...