11431 matches found
CVE-2021-34901
Bentley View 10.15.0.75 is affected by CVE-2021-34901 due to a parsing flaw in 3DS files. The vulnerability causes an out-of-bounds read of data past the end of an allocated buffer, with exploitation requiring user interaction (target must visit a malicious page or open a malicious file). The iss...
CVE-2021-34901
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...
CVE-2021-34900
Bentley View 10.15.0.75 is affected by CVE-2021-34900. The flaw is in J2K file parsing and stems from failing to validate the length of user-supplied data before copying into a heap buffer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or openin...
CVE-2021-34899
Bentley View 10.15.0.75 is vulnerable to a remote code execution through out-of-bounds writes while parsing JT files. Crafted JT data can trigger a write past the end of an allocated buffer, allowing an attacker to execute code in the context of the victim process. User interaction is required (v...
CVE-2021-34898
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34897
Bentley View 10.15.0.75 is affected by CVE-2021-34897 due to an out-of-bounds write in DGN file parsing. Crafted DGN data can trigger a write past the end of an allocated buffer, allowing an attacker to execute code in the context of the current process. Exploitation requires user interaction (vi...
CVE-2021-34896
CVE-2021-34896 affects Bentley View 10.15.0.75 and is caused by improper validation of the length of user-supplied data during BMP file parsing, leading to a heap-based buffer overflow. The vulnerability allows an attacker to execute arbitrary code in the context of the current process after the ...
CVE-2021-34896
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34895
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34895
Bentley View 3DS file parsing vulnerability (CVE-2021-34895) allows remote code execution by exploiting a use-after-free/object- existence check flaw. Affected product/version: Bentley View 10.15.0.75. Attack requires user interaction (target visits a malicious page or opens a malicious file). Ro...
CVE-2021-34894
CVE-2021-34894 affects Bentley View 10.15.0.75, with a flaw in 3DS file parsing where the code fails to validate an object before operating on it. The vulnerability can enable remote code execution in the context of the current process when a user opens a crafted 3DS file (use-after-free-like beh...
CVE-2021-34894
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34893
CVE-2021-34893 affects Bentley View 10.15.0.75. The flaw is in BMP file parsing where the length of user-supplied data is not properly validated before copying to a heap-based buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (vis...
CVE-2021-34893
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34892
Bentley View vulnerability CVE-2021-34892 affects Bentley View 10.15.0.75 and stems from improper validation of the length of user-supplied data during JT file parsing, leading to a stack-based buffer overflow and remote code execution. Exploitation requires user interaction (visiting a malicious...
CVE-2021-34892
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34891
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34890
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...
CVE-2021-34890
Bentley View 10.15.0.75 is affected by CVE-2021-34890 due to an out-of-bounds read in JT file parsing, caused by insufficient input validation. This enables information disclosure and, with further vulnerabilities, may allow arbitrary code execution in the target process. Affected users should ap...
CVE-2021-34889
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...