CVE-2021-34882

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-34881

Bentley View 10.15.0.75 is affected by a vulnerability in OBJ file parsing that allows information disclosure through an out-of-bounds read. The issue stems from insufficient validation of user-supplied data, potentially enabling an attacker to read beyond allocated buffers. Exploitation requires...

CVE-2021-34881

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-34880

Bentley View 10.15.0.75 is affected by CVE-2021-34880 due to a flaw in 3DS file parsing that can trigger a read past the end of an allocated buffer. This enables remote code execution in the context of the current process and requires user interaction (visiting a malicious page or opening a malic...

CVE-2021-34879

Bentley View 10.15.0.75 is affected by a J2K File Parsing vulnerability (memory misreference/use-after-free) that allows code execution. The issue arises from not validating the existence of an object before performing operations during J2K parsing, enabling an attacker to execute code with the c...

CVE-2021-34877

Bentley View 10.15.0.75 is affected by CVE-2021-34877 due to an out-of-bounds write in JT file parsing. A crafted JT file can trigger code execution in the current process, requiring user interaction (visiting a malicious page or opening a malicious file). Related disclosures (ZDI-21-1465, CNVD/C...

CVE-2021-34875

CVE-2021-34875 concerns Bentley View 10.15.0.75 where the 3DS file parser contains an out-of-bounds write vulnerability. Crafted 3DS data can trigger a write past the end of an allocated buffer, enabling arbitrary code execution in the context of the affected process. Several sources confirm this...

CVE-2021-34875

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34874

CVE-2021-34874 affects Bentley View 10.15.0.75. The issue is a memory corruption vulnerability in the 3DS file parsing path caused by insufficient validation of user-supplied data. This can lead to arbitrary code execution in the current process when a target visits a malicious page or opens a cr...

CVE-2021-34873

CVE-2021-34873 (Bentley View) affects Bentley View 10.15.0.75. The flaw is in the PDF parsing code and is an out-of-bounds write triggered by crafted PDF data, allowing an attacker to run code in the context of the current process. Exploitation requires user interaction (target must visit a malic...

CVE-2021-34872

CVE-2021-34872 affects Bentley View 10.15.0.75 via SKP file parsing. The flaw is a memory/object-usage issue from not validating an object’s existence before operations, enabling remote code execution when a user visits a malicious page or opens a malicious SKP-containing file. ZDI-21-1462 descri...

CVE-2021-34872

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34871

Bentley View 10.15.0.75 is affected by a BMP file parsing flaw leading to a heap-based buffer overflow, enabling remote code execution with user interaction (visiting a malicious page or opening a malicious file). The issue stems from inadequate validation of the length of user-supplied data befo...

CVE-2021-34858

CVE-2021-34858 affects TeamViewer. The flaw resides in TVS file parsing and stems from insufficient validation of user-supplied data, enabling an out-of-bounds read that can let an attacker execute code in the target process. Public sources describe remote code execution with user interaction req...

CVE-2021-44444

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted JT files. An attacker could leverage this...

CVE-2021-44432

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products is vulnerable to stack based buffer overflow while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the...

CVE-2021-44433

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products contains a use after free vulnerability that could be triggered while parsing specially crafted JT files. An attacker could leverage this vulnerability to...

CVE-2021-44440

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products is vulnerable to memory corruption condition while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the...

CVE-2021-44450

A vulnerability has been identified in JT Utilities All versions V12.8.1.1, JTTK All versions V10.8.1.1. JTTK library in affected products is vulnerable to an out of bounds read past the end of an allocated buffer when parsing JT files. An attacker could leverage this vulnerability to leak...

CVE-2021-44444

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted JT files. An attacker could leverage this...