CVE-2021-34885

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34885

Bentley View 10.15.0.75 is affected by a JT file parsing out-of-bounds read that allows remote code execution. Exploitation requires user interaction (visit a malicious page/open a malicious JT file). The issue is documented via ZDI-21-1474 (referred to as ZDI-CAN-14838). Mitigation: Bentley rele...