CVE-2021-46591

The CVE-2021-46591 entry covers Bentley MicroStation CONNECT 10.16.0.80. The vulnerability resides in the parsing of JT files, where crafted JT data can trigger a read past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires ...

CVE-2021-46590

CVE-2021-46590 (Bentley MicroStation CONNECT 10.16.0.80) : A vulnerability exists in the parsing of JT files where crafted data can trigger a read past the end of an allocated buffer, enabling remote code execution. Exploitation requires user interaction (target must open a malicious page or file...

CVE-2021-46590

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46589

Bentley MicroStation CONNECT vulnerability CVE-2021-46589 involves a DGN file parsing flaw that can trigger an out-of-bounds read on an affected installation (MicroStation CONNECT 10.16.0.80). The issue stems from insufficient validation of user-supplied data and can allow an attacker to disclose...

CVE-2021-46589

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...

CVE-2021-46588

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46588

CVE-2021-46588 affects Bentley MicroStation CONNECT 10.16.0.80. The issue is a parsing flaw in JT files that leads to a use-after-free, enabling remote code execution. Exploitation requires user interaction (visit a malicious page or open a malicious file). Multiple connected sources (e.g., ZDI-2...

CVE-2021-46587

Bentley MicroStation CONNECT 3DS File Parsing Use-After-Free Remote Code Execution vulnerability (CVE-2021-46587) is described in connected sources as affecting MicroStation CONNECT with 3DS file parsing leading to a use-after-free condition due to the code not validating the existence of an obje...

CVE-2021-46587

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46586

Bentley MicroStation CONNECT (affected version 10.16.0.80) is vulnerable due to a flaw in 3DS file parsing that can trigger a write past the end of an allocated buffer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file); ...

CVE-2021-46586

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46585

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46585

CVE-2021-46585 affects Bentley MicroStation CONNECT 10.16.0.80. The vulnerability is a stack-based buffer overflow caused by insufficient validation of user-supplied data while parsing JT files, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or o...

CVE-2021-46584

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46584

CVE-2021-46584 affects Bentley MicroStation CONNECT 10.16.0.80. The flaw is in the parsing of J2K images, where crafted data can trigger a write past the end of an allocated buffer, allowing an attacker to execute code in the context of the current process. User interaction is required (visiting ...

CVE-2021-46583

CVE-2021-46583 affects Bentley MicroStation CONNECT 10.16.0.80. The root cause is an out-of-bounds write in the J2K image parser, triggered by crafted J2K data. This can allow a remote attacker to execute arbitrary code in the context of the affected process, with user interaction required (visit...

CVE-2021-46582

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46582

Bentley MicroStation CONNECT (versions including 10.16.0.80) is affected by a JP2 image parsing vulnerability. The flaw arises from not validating the existence of an object before performing operations on it, enabling use-after-free-like behavior that can lead to remote code execution. Exploitat...

CVE-2021-46581

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46581

CVE-2021-46581 affects Bentley MicroStation CONNECT 10.16.0.80. The vulnerability arises from parsing JT files, where crafted data can trigger a write past the end of an allocated buffer, enabling remote code execution in the current process. Exploitation requires user interaction (visiting a mal...