CVE-2021-46648

Bentley MicroStation CONNECT 10.16.0.80 is affected by a heap-based buffer overflow in DGN file parsing due to improper validation of the length of user-supplied data. This allows remote code execution in the context of the current process, with exploitation requiring user interaction (target mus...

CVE-2021-46647

The CVE-2021-46647 entry concerns Bentley MicroStation CONNECT (10.16.0.80). The vulnerability is a heap-based buffer overflow during BMP image parsing caused by insufficient validation of the length of user-supplied data prior to copying it into a heap buffer. This flaw can allow an attacker to ...

CVE-2021-46646

CVE-2021-46646 affects Bentley MicroStation CONNECT 10.16.0.80. The issue is an out-of-bounds write in the DGN file parser, allowing code execution in the context of the current process. Exploitation requires user interaction (visiting a malicious page or opening a malicious file) and crafted DGN...

CVE-2021-46645

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46645

CVE-2021-46645 affects Bentley MicroStation CONNECT 10.16.0.80. The vulnerability resides in BMP image parsing, where crafted BMP data can trigger a write past the end of an allocated buffer, allowing remote code execution in the context of the current process. User interaction is required (targe...

CVE-2021-46644

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46644

Bentley MicroStation CONNECT 10.16.0.80 is affected by an out-of-bounds write vulnerability in DGN file parsing. The flaw allows remote code execution via crafted DGN data that triggers a write past the end of an allocated buffer; user interaction is required (visit a malicious page or open a mal...

CVE-2021-46639

CVE-2021-46639 affects Bentley MicroStation CONNECT 10.16.0.80. Connected sources (ZDI-22-226 and related notices) describe an out-of-bounds write in DGN file parsing that can allow remote code execution; exploitation requires user interaction (visiting malicious page or opening a malicious file)...

CVE-2021-46638

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46638

CVE-2021-46638 is substantiated by multiple connected advisories (notably ZDI-22-225) describing a stack-based buffer overflow in Bentley MicroStation CONNECT 10.16.0.80 during DGN file parsing. The flaw arises from insufficient validation of the length of user-supplied data prior to copying it i...

CVE-2021-46637

CVE-2021-46637 affects Bentley MicroStation CONNECT (10.16.0.80). The vulnerability is an out-of-bounds read while parsing DGN files caused by insufficient validation of user-supplied data, allowing a remote attacker to disclose sensitive information by convincing a user to open a malicious file/...

CVE-2021-46637

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2021-46636

Bentley MicroStation CONNECT 10.16.0.80 contains a DGN file parsing buffer-overread flaw that can allow remote code execution. Attacker must entice a user to open a malicious page/file; code runs in the target process. References: ZDI-22-223, BE-2021-0009. No patch/version details provided.

CVE-2021-46636

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46635

Bentley MicroStation CONNECT 10.16.0.80 is affected by a buffer overrun in the DGN file parser. Crafted DGN data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process after the user visits a malicious page or opens a maliciou...

CVE-2021-46634

Bentley MicroStation CONNECT 10.16.0.80 is affected by CVE-2021-46634 due to an out-of-bounds write in JT file parsing. The flaw can allow remote code execution in the context of the affected process; exploitation requires user interaction (visiting a malicious page or opening a malicious file). ...

CVE-2021-46633

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46633

CVE-2021-46633 affects Bentley MicroStation CONNECT 10.16.0.80. The root cause is improper validation of an object before operations during PDF parsing, enabling an attacker to execute arbitrary code in the current process. Requires user interaction (visiting a malicious page or opening a crafted...

CVE-2021-46622

Bentley MicroStation CONNECT vulnerable to out-of-bounds read when parsing J2K files (CJ2K image parsing) in version 10.16.0.80. The flaw allows remote code execution in the context of the current process. Exploitation requires user interaction (visiting a malicious page or opening a malicious fi...

CVE-2021-46622

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...