12404 matches found
CVE-2021-34936
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34936
Bentley View 10.15.0.75 is affected by CVE-2021-34936 due to a JT file parsing flaw. The vulnerability stems from failing to validate the existence of an object before performing operations, enabling an attacker to execute arbitrary code in the process context after the user visits a malicious pa...
CVE-2021-34935
CVE-2021-34935 affects Bentley View 10.15.0.75 and is triggered by parsing JT files. The flaw is a write past the end of an allocated buffer in JT file parsing, allowing remote code execution in the context of the current process. Exploitation requires user interaction (visiting a malicious page ...
CVE-2021-34934
CVE-2021-34934 affects Bentley View 10.15.0.75, with a vulnerability in the parsing of JT files that can cause memory corruption and allow to execute code in the target process. The attack requires user interaction (visiting a malicious page or opening a malicious file). Several connected sources...
CVE-2021-34934
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34933
CVE-2021-34933 affects Bentley View 10.15.0.75 and is a use-after-free/invalid object handling issue in JT file parsing that allows remote code execution. The flaw stems from not validating the existence of an object before performing operations, enabling an attacker to execute code in the curren...
CVE-2021-34933
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34932
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34932
This CVE affects Bentley View 10.15.0.75, where JT file parsing can trigger a write past the end of an allocated buffer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious JT file). Reported as ZDI-14910; fixes are available in...
CVE-2021-34931
CVE-2021-34931 affects Bentley View 10.15.0.75 and relates to parsing JT files. The root cause is a failure to validate the existence of an object before performing operations, enabling a use-after-free style condition that can lead to remote code execution. Exploitation requires user interaction...
CVE-2021-34931
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34930
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34930
The CVE-2021-34930 issue affects Bentley View (e.g., version 10.15.0.75) and arises from parsing JT files. The root cause is a read past the end of an allocated buffer in the JT file parser, enabling remote code execution in the current process with user interaction required (the user must open a...
CVE-2021-34929
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34929
Bentley View 10.15.0.75 is affected by CVE-2021-34929 due to an out-of-bounds write in parsing JT files, which can lead to remote code execution when a user opens a crafted JT file or visits a malicious page. The vulnerability allows code execution in the context of the current process and requir...
CVE-2021-34928
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34928
CVE-2021-34928 affects Bentley View 10.15.0.75. The vulnerability is in the parsing of JT files and stems from a write past the end of an allocated buffer, enabling remote code execution. Exploitation requires user interaction (the target must visit a malicious page or open a malicious file). Sev...
CVE-2021-34927
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34927
CVE-2021-34927 affects Bentley View 10.15.0.75 and is due to a flawed JT file parsing that can trigger a read past the end of an allocated buffer, allowing remote code execution. Exploitation requires user interaction (target must open a malicious JT file or visit a crafted page). Multiple source...
CVE-2021-34926
CVE-2021-34926 (Bentley View) affects Bentley View 10.15.0.75, where the flaw lies in parsing of JT files. Crafted JT data can trigger an out‑of‑bounds write, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a malicious page or...