Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

Design/Logic Flaw

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-34919

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34919

Bentley View is affected by CVE-2021-34919 via the JP2 file parsing path. The root cause is lack of validation when operating on an object, leading to a use-after-free condition that can allow remote code execution in the context of the current process. Exploitation requires user interaction (e.g...

CVE-2021-34918

CVE-2021-34918 affects Bentley View 10.15.0.75. The vulnerability resides in JP2 file parsing, where crafted JP2 data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a m...

CVE-2021-34918

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34884

Bentley View 10.15.0.75 is affected by a JP2 file parsing vulnerability. The root cause is a use-after-release style flaw where the parser does not validate the existence of an object before performing operations, enabling information disclosure. The ZDI advisory (ZDI-21-1473) confirms this as a ...

CVE-2021-34882

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

Adobe Acrobat Reader DC JP2 File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled component references in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened.

...

Bentley View Information Disclosure Vulnerability (CNVD-2021-102016)

Bentley View is a free viewer from Bentley Systems, U.S.A. Bentley View is vulnerable to an information disclosure vulnerability caused by a use-after-release vulnerability when parsing JP2 files. An attacker could exploit this vulnerability to obtain sensitive information...

Bentley View JP2 File Out-of-Bounds Writing Vulnerability

Bentley View is a free viewer from Bentley Systems, Inc. An out-of-bounds write vulnerability exists in Bentley View JP2 files, which stems from the fact that data created in a JP2 file can trigger a write operation beyond the end of the allocated buffer. An attacker could exploit this...

Bentley View JP2 File Parsing Out-of-Bounds Read Information Disclosure Vulnerability

Bentley View is a free viewer from Bentley Systems, Inc. A security vulnerability exists in Bentley View JP2 file parsing, which could be exploited by attackers to obtain sensitive information about affected Bentley View installations...

Bentley View JP2 File Parsing Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

Bentley View JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

Bentley Systems Bentley View 缓冲区错误漏洞

Bentley View is a free viewer from Bentley Systems, Inc. An out-of-bounds write vulnerability exists in Bentley View JP2 files, which stems from the fact that data created in a JP2 file can trigger a write operation beyond the end of the allocated buffer. An attacker could exploit this...

Bentley View JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2...

Bentley View JP2 File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2...