CVE-2021-34889

Bentley View 10.15.0.75 is affected by a 3DS file parsing vulnerability described as an out-of-bounds/read-past-end condition. The flaw stems from insufficient validation of user-supplied data during 3DS parsing, allowing information disclosure and, in conjunction with other vulnerabilities, pote...

CVE-2021-34888

Bentley View 10.15.0.75 is affected by CVE-2021-34888 via a vulnerability in JT file parsing. The flaw stems from improper validation of user-supplied data, causing a read past the end of an allocated buffer and enabling information disclosure; it could be leveraged with other flaws to execute ar...

CVE-2021-34886

Bentley View 10.15.0.75 is affected by CVE-2021-34886. The issue lies in FBX file parsing where the code does not validate the existence of an object before performing operations, enabling information disclosure. Multiple sources (NVD, Red Hat, CVE records, ZDI advisory) describe this as a use-af...

CVE-2021-34886

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-34885

Bentley View 10.15.0.75 is affected by a JT file parsing out-of-bounds read that allows remote code execution. Exploitation requires user interaction (visit a malicious page/open a malicious JT file). The issue is documented via ZDI-21-1474 (referred to as ZDI-CAN-14838). Mitigation: Bentley rele...

CVE-2021-34884

Bentley View 10.15.0.75 is affected by a JP2 file parsing vulnerability. The root cause is a use-after-release style flaw where the parser does not validate the existence of an object before performing operations, enabling information disclosure. The ZDI advisory (ZDI-21-1473) confirms this as a ...

CVE-2021-34884

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-34883

Bentley View 10.15.0.75 is affected by CVE-2021-34883 due to a flaw in J2K file parsing. The issue stems from insufficient validation of user-supplied data, causing a read past the end of an allocated buffer and leading to sensitive information disclosure. Successful exploitation requires user in...

CVE-2021-34883

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-34882

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-34881

Bentley View 10.15.0.75 is affected by a vulnerability in OBJ file parsing that allows information disclosure through an out-of-bounds read. The issue stems from insufficient validation of user-supplied data, potentially enabling an attacker to read beyond allocated buffers. Exploitation requires...

CVE-2021-34881

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-34880

Bentley View 10.15.0.75 is affected by CVE-2021-34880 due to a flaw in 3DS file parsing that can trigger a read past the end of an allocated buffer. This enables remote code execution in the context of the current process and requires user interaction (visiting a malicious page or opening a malic...

CVE-2021-34879

Bentley View 10.15.0.75 is affected by a J2K File Parsing vulnerability (memory misreference/use-after-free) that allows code execution. The issue arises from not validating the existence of an object before performing operations during J2K parsing, enabling an attacker to execute code with the c...

CVE-2021-34877

Bentley View 10.15.0.75 is affected by CVE-2021-34877 due to an out-of-bounds write in JT file parsing. A crafted JT file can trigger code execution in the current process, requiring user interaction (visiting a malicious page or opening a malicious file). Related disclosures (ZDI-21-1465, CNVD/C...

CVE-2021-34875

CVE-2021-34875 concerns Bentley View 10.15.0.75 where the 3DS file parser contains an out-of-bounds write vulnerability. Crafted 3DS data can trigger a write past the end of an allocated buffer, enabling arbitrary code execution in the context of the affected process. Several sources confirm this...

CVE-2021-34875

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34874

CVE-2021-34874 affects Bentley View 10.15.0.75. The issue is a memory corruption vulnerability in the 3DS file parsing path caused by insufficient validation of user-supplied data. This can lead to arbitrary code execution in the current process when a target visits a malicious page or opens a cr...

CVE-2021-34873

CVE-2021-34873 (Bentley View) affects Bentley View 10.15.0.75. The flaw is in the PDF parsing code and is an out-of-bounds write triggered by crafted PDF data, allowing an attacker to run code in the context of the current process. Exploitation requires user interaction (target must visit a malic...

CVE-2021-34872

CVE-2021-34872 affects Bentley View 10.15.0.75 via SKP file parsing. The flaw is a memory/object-usage issue from not validating an object’s existence before operations, enabling remote code execution when a user visits a malicious page or opens a malicious SKP-containing file. ZDI-21-1462 descri...