10642 matches found
CVE-2021-46597
Bentley MicroStation CONNECT 10.16.0.80 is affected by a vulnerability in JT file parsing (use-after-free) that allows remote code execution. The flaw stems from not validating object existence before operations; exploitation requires user interaction (visiting a malicious page or opening a malic...
CVE-2021-46596
Bentley MicroStation CONNECT 10.16.0.80 is affected by an OBJ file parsing flaw that can disclose sensitive information due to an out-of-bounds read in the parser. The issue stems from insufficient validation of user-supplied data, allowing read past the end of an allocated buffer. Exploitation r...
CVE-2021-46596
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...
CVE-2021-46593
CVE-2021-46593 affects Bentley MicroStation CONNECT 10.16.0.80. The issue is in parsing of DWG files due to insufficient validation, causing a read past the end of an allocated buffer and potential arbitrary code execution in the current process when combined with other vulnerabilities. Attacker ...
CVE-2021-46593
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...
CVE-2021-46592
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2021-46592
CVE-2021-46592 affects Bentley MicroStation CONNECT 10.16.0.80. The root cause is in the parsing of 3DS files where the code fails to validate the existence of an object before performing operations, leading to use-after-free and remote code execution. Exploitation requires user interaction (visi...
CVE-2021-46591
The CVE-2021-46591 entry covers Bentley MicroStation CONNECT 10.16.0.80. The vulnerability resides in the parsing of JT files, where crafted JT data can trigger a read past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires ...
CVE-2021-46591
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2021-46590
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2021-46589
Bentley MicroStation CONNECT vulnerability CVE-2021-46589 involves a DGN file parsing flaw that can trigger an out-of-bounds read on an affected installation (MicroStation CONNECT 10.16.0.80). The issue stems from insufficient validation of user-supplied data and can allow an attacker to disclose...
CVE-2021-46588
CVE-2021-46588 affects Bentley MicroStation CONNECT 10.16.0.80. The issue is a parsing flaw in JT files that leads to a use-after-free, enabling remote code execution. Exploitation requires user interaction (visit a malicious page or open a malicious file). Multiple connected sources (e.g., ZDI-2...
CVE-2021-46588
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2021-46587
Bentley MicroStation CONNECT 3DS File Parsing Use-After-Free Remote Code Execution vulnerability (CVE-2021-46587) is described in connected sources as affecting MicroStation CONNECT with 3DS file parsing leading to a use-after-free condition due to the code not validating the existence of an obje...
CVE-2021-46586
Bentley MicroStation CONNECT (affected version 10.16.0.80) is vulnerable due to a flaw in 3DS file parsing that can trigger a write past the end of an allocated buffer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file); ...
CVE-2021-46585
CVE-2021-46585 affects Bentley MicroStation CONNECT 10.16.0.80. The vulnerability is a stack-based buffer overflow caused by insufficient validation of user-supplied data while parsing JT files, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or o...
CVE-2021-46585
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2021-46584
CVE-2021-46584 affects Bentley MicroStation CONNECT 10.16.0.80. The flaw is in the parsing of J2K images, where crafted data can trigger a write past the end of an allocated buffer, allowing an attacker to execute code in the context of the current process. User interaction is required (visiting ...
CVE-2021-46584
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...
CVE-2021-46583
CVE-2021-46583 affects Bentley MicroStation CONNECT 10.16.0.80. The root cause is an out-of-bounds write in the J2K image parser, triggered by crafted J2K data. This can allow a remote attacker to execute arbitrary code in the context of the affected process, with user interaction required (visit...