CVE-2021-46641

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-46641

Bentley View 10.15.0.75 is affected by a DGN file parsing vulnerability. Crafted DNG data can trigger a read past the end of an allocated buffer, enabling remote code execution in the current process. User interaction is required (visiting a malicious page or opening a malicious file). No specifi...

CVE-2021-46640

Bentley View is affected by CVE-2021-46640. The vulnerability resides in the DGN file parsing code, where crafted DGN data can trigger a write past the end of an allocated buffer, enabling arbitrary code execution in the process context. The issue requires user interaction (visiting a malicious p...

CVE-2021-46640

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-46639

CVE-2021-46639 affects Bentley MicroStation CONNECT 10.16.0.80. Connected sources (ZDI-22-226 and related notices) describe an out-of-bounds write in DGN file parsing that can allow remote code execution; exploitation requires user interaction (visiting malicious page or opening a malicious file)...

CVE-2021-46639

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46638

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46638

CVE-2021-46638 is substantiated by multiple connected advisories (notably ZDI-22-225) describing a stack-based buffer overflow in Bentley MicroStation CONNECT 10.16.0.80 during DGN file parsing. The flaw arises from insufficient validation of the length of user-supplied data prior to copying it i...

CVE-2021-46637

CVE-2021-46637 affects Bentley MicroStation CONNECT (10.16.0.80). The vulnerability is an out-of-bounds read while parsing DGN files caused by insufficient validation of user-supplied data, allowing a remote attacker to disclose sensitive information by convincing a user to open a malicious file/...

CVE-2021-46637

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2021-46636

Bentley MicroStation CONNECT 10.16.0.80 contains a DGN file parsing buffer-overread flaw that can allow remote code execution. Attacker must entice a user to open a malicious page/file; code runs in the target process. References: ZDI-22-223, BE-2021-0009. No patch/version details provided.

CVE-2021-46636

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46635

Bentley MicroStation CONNECT 10.16.0.80 is affected by a buffer overrun in the DGN file parser. Crafted DGN data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process after the user visits a malicious page or opens a maliciou...

CVE-2021-46635

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46589

Bentley MicroStation CONNECT vulnerability CVE-2021-46589 involves a DGN file parsing flaw that can trigger an out-of-bounds read on an affected installation (MicroStation CONNECT 10.16.0.80). The issue stems from insufficient validation of user-supplied data and can allow an attacker to disclose...

CVE-2021-46589

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2021-46575

CVE-2021-46575 affects Bentley MicroStation CONNECT 10.16.0.80. The issue is a parsing-use-after-free flaw in DGN file handling where the code does not validate object existence before operations, enabling remote code execution in the process context. Exploitation requires user interaction (visit...

CVE-2021-46575

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

Bentley MicroStation CONNECT DGN File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with...

Bentley MicroStation CONNECT DGN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...