Open Design Alliance (ODA) Drawings Explorer BMP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fl...

Siemens Syngo FastView Out-of-Bounds Writing Vulnerability (CNVD-2022-56511)

Siemens Syngo FastView is a standalone viewer of Dicom 2 images available on Dicom exchange media from Siemens, Germany. An out-of-bounds write vulnerability exists in Siemens Syngo FastView, which stems from a lack of proper validation of user-supplied data when parsing BMP files. An attacker...

USN-5202-1: OpenJDK vulnerabilities

Varnavas Papaioannou discovered that the FTP client implementation in OpenJDK accepted alternate server IP addresses when connecting with FTP passive mode. An attacker controlling an FTP server that an application connects to could possibly use this to expose sensitive information rudimentary por...

Bentley View BMP File Parsing Heap Buffer Overflow Remote Code Execution Vulnerability (CNVD-2021-102036)

Bentley View is a free viewer from Bentley Systems, Inc. Bentley View BMP file parsing heap buffer overflow remote code execution vulnerability is due to a failure to properly validate the length of user-supplied data before copying it to the heap buffer. An attacker could exploit this...

Bentley View BMP File Parsing Heap Buffer Overflow Remote Code Execution Vulnerability

A security vulnerability exists in Bentley View, a free viewer from Bentley Systems, U.S.A. The Bentley View BMP file parsing vulnerability is due to a failure to properly validate the length of user-supplied data before copying it to a heap buffer. An attacker could exploit this vulnerability to...

Bentley View Buffer Overflow Vulnerability (CNVD-2021-102038)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View caused by incorrect boundary checking when parsing BMP files, which could be exploited by an attacker to cause a buffer overflow and execute arbitrary code on the system...

CVE-2021-32024

A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP versions 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the affected process...

CVE-2021-32024

A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP versions 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the affected process...

Remote code execution

A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP versions 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the affected process...

CVE-2021-32024

CVE-2021-32024 describes a remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP versions 6.4–7.1. The affected component is the BMP image codec; the underlying issue enables an attacker to potentially execute code within the context of the vulnerable process. Documente...

CVE-2021-32024

A remote code execution vulnerability in the BMP image codec of BlackBerry QNX SDP versions 6.4 to 7.1 could allow an attacker to potentially execute code in the context of the affected process...

Bentley View BMP File Parsing Stack Buffer Overflow Vulnerability

Bentley View, a free viewer from Bentley Systems, Inc. A stack buffer overflow vulnerability exists in Bentley View BMP file parsing, which is due to a failure to properly validate the length of user-supplied data before copying it to the heap buffer. An attacker could exploit this vulnerability ...

Bentley View BMP File Parsing Out-of-Bounds Writing Vulnerability

Bentley View is a free viewer from Bentley Systems, Inc. An out-of-bounds write vulnerability exists in Bentley View BMP file parsing, which stems from the fact that data created in a DBMP file can trigger a write operation beyond the end of the allocated buffer. An attacker could exploit this...

OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8267735)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: ImageIO. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

Bentley View BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP...

Bentley Systems Bentley View 资源管理错误漏洞

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View caused by incorrect boundary checking when parsing BMP files, which could be exploited by an attacker to cause a buffer overflow and execute arbitrary code on the system...

Bentley Systems Bentley View 缓冲区错误漏洞

Bentley Systems Bentley View is a free viewer from Bentley Systems, USA. A security vulnerability exists in Bentley View that could be exploited by a remote attacker to execute arbitrary code on an affected Bentley View installation. User interaction is required to exploit the vulnerability, as t...

Bentley View BMP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP...

Bentley Systems Bentley View 缓冲区错误漏洞

Bentley View is a free viewer from Bentley Systems, Inc. Bentley View BMP file parsing heap buffer overflow remote code execution vulnerability is due to a failure to properly validate the length of user-supplied data before copying it to the heap buffer. An attacker could exploit this...

Bentley View BMP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of BMP...