CVE-2021-34910

CVE-2021-34910 affects Bentley View 10.15.0.75. The vulnerability arises from parsing DGN files and is caused by insufficient validation of user-supplied data, leading to an out-of-bounds read. This could allow a local attacker who can coerce the target to visit a malicious page or open a malicio...

CVE-2021-34905

Bentley View 10.15.0.75 is affected by CVE-2021-34905 due to a heap-based buffer overflow in DGN file parsing. The flaw stems from insufficient validation of the length of user-supplied data prior to copying it, allowing remote code execution when a user opens a malicious DGN or visits a crafted ...

CVE-2021-34905

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34904

CVE-2021-34904 affects Bentley View 10.15.0.75. A heap-based buffer overflow in the DGN file parsing path results from insufficient validation of the length of user-supplied data before copying it to a heap buffer. This allows remote code execution in the context of the current process when a use...

CVE-2021-34904

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34897

Bentley View 10.15.0.75 is affected by CVE-2021-34897 due to an out-of-bounds write in DGN file parsing. Crafted DGN data can trigger a write past the end of an allocated buffer, allowing an attacker to execute code in the context of the current process. Exploitation requires user interaction (vi...

CVE-2021-34897

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

Open Design Alliance Drawings SDK Out-of-Bounds Writing Vulnerability (CNVD-2022-01424)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The SDK provides access to data in .dwg and .dgn through a convenient, object-oriented API, providing a C API, support for repair files, support for the . The...

Open Design Alliance Drawings SDK Out-of-Bounds Read Vulnerability (CNVD-2022-01423)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The package provides access to data in .dwg and .dgn through a convenient, object-oriented API, providing a C API, support for repair files, support for the . This...

Open Design Alliance Drawings SDK Out-of-Bounds Reading Vulnerability (CNVD-2022-01422)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The package provides access to data in .dwg and .dgn through a convenient, object-oriented API, providing a C API, support for repair files, support for the . This...

Bentley View Code Execution Vulnerability (CNVD-2021-102057)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View, which is caused by an out-of-bounds write when parsing DGN files. An attacker could exploit this vulnerability to execute arbitrary code on the system...

Bentley View Code Execution Vulnerability (CNVD-2021-102058)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View, which is caused by an out-of-bounds write when parsing DGN files. An attacker could exploit this vulnerability to execute arbitrary code on the system...

Bentley View Information Disclosure Vulnerability (CNVD-2021-102032)

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View caused by an out-of-bounds read when parsing DGN files, which could be exploited by an attacker to obtain sensitive information...

Bentley View DGN File Parsing Stack Buffer Overflow Vulnerability

Bentley View, a free viewer from Bentley Systems, Inc. A stack buffer overflow vulnerability exists in Bentley View DGN file parsing, which stems from a lack of proper validation of the length of user-supplied data before it is copied to the heap buffer in DGN file parsing. An attacker could...

Bentley View DGN File Parsing Out-of-Bounds Writing Vulnerability

Bentley View, a free viewer from Bentley Systems, Inc. An out-of-bounds write vulnerability exists in Bentley View DGN file parsing, which stems from the fact that data created in a DGN file can trigger a write operation beyond the end of the allocated buffer. An attacker could exploit this...

Bentley Systems Bentley View 缓冲区错误漏洞

Bentley View, a free viewer from Bentley Systems, Inc. An out-of-bounds write vulnerability exists in Bentley View DGN file parsing, which stems from the fact that data created in a DGN file can trigger a write operation beyond the end of the allocated buffer. An attacker could exploit this...

Bentley Systems Bentley View 缓冲区错误漏洞

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View, which is caused by an out-of-bounds write when parsing DGN files. An attacker could exploit this vulnerability to execute arbitrary code on the system...

Bentley Systems Bentley View 缓冲区错误漏洞

Bentley View, a free viewer from Bentley Systems, Inc. A stack buffer overflow vulnerability exists in Bentley View DGN file parsing, which stems from a lack of proper validation of the length of user-supplied data before it is copied to the heap buffer in DGN file parsing. An attacker could...

Bentley View DGN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN...

Bentley View DGN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DGN...