12405 matches found
CVE-2021-34915
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34915
CVE-2021-34915 affects Bentley View 10.15.0.75. The root cause is a flaw in J2K file parsing that can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (target must visit a malicious pa...
CVE-2021-34914
Bentley View 10.15.0.75 is affected by a DGN file parsing vulnerability that can trigger an out-of-bounds write. A crafted DGN file (or malicious page/file) may allow an attacker to execute code in the process context, with user interaction required to exploit. Root cause is a write past the end ...
CVE-2021-34913
Bentley View 10.15.0.75 is affected by CVE-2021-34913 due to a flaw in JT file parsing that can trigger a read past the end of an allocated buffer, enabling remote code execution. The vulnerability requires user interaction (the target must open a malicious JT file or visit a crafted page). Multi...
CVE-2021-34913
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34912
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34912
CVE-2021-34912 affects Bentley View 10.15.0.75. The vulnerability arises in the JT file parsing code, where crafted JT data can trigger a read past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitation requires user interaction (the tar...
CVE-2021-34911
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34911
Bentley View 10.15.0.75 is affected by a vulnerability in 3DS file parsing that stems from not validating the existence of an object before operations, enabling potential remote code execution. The issue is documented across multiple sources (ZDI-21-1500, NVD, Red Hat, CNVD/CNNVD-style records) a...
CVE-2021-34910
CVE-2021-34910 affects Bentley View 10.15.0.75. The vulnerability arises from parsing DGN files and is caused by insufficient validation of user-supplied data, leading to an out-of-bounds read. This could allow a local attacker who can coerce the target to visit a malicious page or open a malicio...
CVE-2021-34910
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...
CVE-2021-34909
Bentley View 10.15.0.75 is affected by CVE-2021-34909 due to a parsing flaw in JT files that fails to validate object existence before operations, enabling remote code execution via crafted JT content. The attack requires user interaction (visiting a malicious page or opening a malicious file). T...
CVE-2021-34909
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34908
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34908
Bentley View 10.15.0.75 is affected by CVE-2021-34908. The issue arises in the parsing of J2K files where the attacker does not validate the existence of an object before performing operations, leading to remote code execution. Exploitation requires user interaction (e.g., visiting a malicious pa...
CVE-2021-34907
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34907
Summary: CVE-2021-34907 affects Bentley View 10.15.0.75. The issue is in BMP file parsing, caused by lack of proper validation of the length of user-supplied data before copying into a heap-based buffer, enabling remote code execution with the attacker’s interaction on a malicious BMP/page. The v...
CVE-2021-34906
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34906
CVE-2021-34906 affects Bentley View 10.15.0.75. The issue arises in J2K file parsing due to failing to validate object existence before operations, enabling remote code execution in the context of the current process. Exploitation requires user interaction (visiting a malicious page or opening a ...
CVE-2021-34905
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...