CVE-2021-34918

CVE-2021-34918 affects Bentley View 10.15.0.75. The vulnerability resides in JP2 file parsing, where crafted JP2 data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a m...

CVE-2021-34917

CVE-2021-34917 affects Bentley View 10.15.0.75. The issue arises from parsing of J2K files and a lack of validating the existence of an object before operating on it, enabling remote code execution when a user visits a malicious page or opens a malicious file. Exploitation is possible via user in...

CVE-2021-34916

Summary of CVE-2021-34916 (Bentley View) : The vulnerability affects Bentley View 10.15.0.75 and arises from improper validation during DWG file parsing, causing an out-of-bounds read (read past end of allocated buffer). An attacker can exploit this via a visited malicious page or opened file, wi...

CVE-2021-34915

CVE-2021-34915 affects Bentley View 10.15.0.75. The root cause is a flaw in J2K file parsing that can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (target must visit a malicious pa...

CVE-2021-34914

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34914

Bentley View 10.15.0.75 is affected by a DGN file parsing vulnerability that can trigger an out-of-bounds write. A crafted DGN file (or malicious page/file) may allow an attacker to execute code in the process context, with user interaction required to exploit. Root cause is a write past the end ...

CVE-2021-34913

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34912

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34912

CVE-2021-34912 affects Bentley View 10.15.0.75. The vulnerability arises in the JT file parsing code, where crafted JT data can trigger a read past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (the tar...

CVE-2021-34911

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34911

Bentley View 10.15.0.75 is affected by a vulnerability in 3DS file parsing that stems from not validating the existence of an object before operations, enabling potential remote code execution. The issue is documented across multiple sources (ZDI-21-1500, NVD, Red Hat, CNVD/CNNVD-style records) a...

CVE-2021-34910

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-34909

Bentley View 10.15.0.75 is affected by CVE-2021-34909 due to a parsing flaw in JT files that fails to validate object existence before operations, enabling remote code execution via crafted JT content. The attack requires user interaction (visiting a malicious page or opening a malicious file). T...

CVE-2021-34908

Bentley View 10.15.0.75 is affected by CVE-2021-34908. The issue arises in the parsing of J2K files where the attacker does not validate the existence of an object before performing operations, leading to remote code execution. Exploitation requires user interaction (e.g., visiting a malicious pa...

CVE-2021-34907

Summary: CVE-2021-34907 affects Bentley View 10.15.0.75. The issue is in BMP file parsing, caused by lack of proper validation of the length of user-supplied data before copying into a heap-based buffer, enabling remote code execution with the attacker’s interaction on a malicious BMP/page. The v...

CVE-2021-34906

CVE-2021-34906 affects Bentley View 10.15.0.75. The issue arises in J2K file parsing due to failing to validate object existence before operations, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a malicious page or opening a ...

CVE-2021-34905

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34905

Bentley View 10.15.0.75 is affected by CVE-2021-34905 due to a heap-based buffer overflow in DGN file parsing. The flaw stems from insufficient validation of the length of user-supplied data prior to copying it, allowing remote code execution when a user opens a malicious DGN or visits a crafted ...

CVE-2021-34902

CVE-2021-34902 affects Bentley View 10.15.0.75. The flaw is in DWG file parsing, arising from insufficient validation that allows an out-of-bounds read (read past the end of an allocated object). This can lead to sensitive information disclosure. Exploitation requires user interaction (target mus...

CVE-2021-34902

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...