CVE-2021-34909

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34899

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34898

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34898

CVE-2021-34898 – Bentley View : Affected product is Bentley View 10.15.0.75. The vulnerability is in the parsing of JT files, where crafted JT data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. User interaction is re...

CVE-2021-34892

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34892

Bentley View vulnerability CVE-2021-34892 affects Bentley View 10.15.0.75 and stems from improper validation of the length of user-supplied data during JT file parsing, leading to a stack-based buffer overflow and remote code execution. Exploitation requires user interaction (visiting a malicious...

CVE-2021-34891

Bentley View JT File Parsing Use-After-Free RCE (CVE-2021-34891): Affects Bentley View 10.15.0.75. The flaw is in JT file parsing where code does not verify object existence before operations, enabling arbitrary code execution after user interaction (visit a malicious page or open a malicious JT ...

CVE-2021-34890

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-34890

Bentley View 10.15.0.75 is affected by CVE-2021-34890 due to an out-of-bounds read in JT file parsing, caused by insufficient input validation. This enables information disclosure and, with further vulnerabilities, may allow arbitrary code execution in the target process. Affected users should ap...

CVE-2021-34888

Bentley View 10.15.0.75 is affected by CVE-2021-34888 via a vulnerability in JT file parsing. The flaw stems from improper validation of user-supplied data, causing a read past the end of an allocated buffer and enabling information disclosure; it could be leveraged with other flaws to execute ar...

CVE-2021-34885

Bentley View 10.15.0.75 is affected by a JT file parsing out-of-bounds read that allows remote code execution. Exploitation requires user interaction (visit a malicious page/open a malicious JT file). The issue is documented via ZDI-21-1474 (referred to as ZDI-CAN-14838). Mitigation: Bentley rele...

CVE-2021-34878

Bentley View 10.15.0.75 is affected by CVE-2021-34878 due to a vulnerability in JT file parsing that can trigger a write past the end of an allocated buffer, allowing remote code execution. The attack requires user interaction (visiting a malicious page or opening a malicious JT file) and leverag...

CVE-2021-34878

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34877

Bentley View 10.15.0.75 is affected by CVE-2021-34877 due to an out-of-bounds write in JT file parsing. A crafted JT file can trigger code execution in the current process, requiring user interaction (visiting a malicious page or opening a malicious file). Related disclosures (ZDI-21-1465, CNVD/C...

CVE-2021-34877

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34876

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

Siemens JT2Go JT File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens JT2Go. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JT...

Bentley View Code Execution Vulnerability (CNVD-2021-102054)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View, which is caused by out-of-bounds writes when parsing JT files. An attacker could exploit this vulnerability to execute arbitrary code on the system...

Bentley View Buffer Overflow Vulnerability (CNVD-2021-102051)

Bentley View is a free viewer from Bentley Systems, Inc. Bentley View is vulnerable to a buffer overflow vulnerability caused by incorrect boundary checking when parsing JT files. An attacker could exploit the vulnerability to cause a buffer overflow and execute arbitrary code on the system...

Bentley View Code Execution Vulnerability (CNVD-2021-102046)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View, which is caused by out-of-bounds writes when parsing JT files. An attacker could exploit this vulnerability to execute arbitrary code on the system...