12405 matches found
CVE-2021-34905
Bentley View 10.15.0.75 is affected by CVE-2021-34905 due to a heap-based buffer overflow in DGN file parsing. The flaw stems from insufficient validation of the length of user-supplied data prior to copying it, allowing remote code execution when a user opens a malicious DGN or visits a crafted ...
CVE-2021-34904
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34904
CVE-2021-34904 affects Bentley View 10.15.0.75. A heap-based buffer overflow in the DGN file parsing path results from insufficient validation of the length of user-supplied data before copying it to a heap buffer. This allows remote code execution in the context of the current process when a use...
CVE-2021-34903
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34903
Bentley View 10.15.0.75 is affected by a BMP file parsing flaw that can trigger an out-of-bounds write, allowing remote code execution in the target process. The vulnerability arises when crafted BMP data causes a write past the end of an allocated buffer. Exploitation requires user interaction (...
CVE-2021-34902
CVE-2021-34902 affects Bentley View 10.15.0.75. The flaw is in DWG file parsing, arising from insufficient validation that allows an out-of-bounds read (read past the end of an allocated object). This can lead to sensitive information disclosure. Exploitation requires user interaction (target mus...
CVE-2021-34902
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...
CVE-2021-34901
Bentley View 10.15.0.75 is affected by CVE-2021-34901 due to a parsing flaw in 3DS files. The vulnerability causes an out-of-bounds read of data past the end of an allocated buffer, with exploitation requiring user interaction (target must visit a malicious page or open a malicious file). The iss...
CVE-2021-34901
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...
CVE-2021-34900
Bentley View 10.15.0.75 is affected by CVE-2021-34900. The flaw is in J2K file parsing and stems from failing to validate the length of user-supplied data before copying into a heap buffer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or openin...
CVE-2021-34900
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34899
Bentley View 10.15.0.75 is vulnerable to a remote code execution through out-of-bounds writes while parsing JT files. Crafted JT data can trigger a write past the end of an allocated buffer, allowing an attacker to execute code in the context of the victim process. User interaction is required (v...
CVE-2021-34899
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34898
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34898
CVE-2021-34898 – Bentley View : Affected product is Bentley View 10.15.0.75. The vulnerability is in the parsing of JT files, where crafted JT data can trigger a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. User interaction is re...
CVE-2021-34897
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34897
Bentley View 10.15.0.75 is affected by CVE-2021-34897 due to an out-of-bounds write in DGN file parsing. Crafted DGN data can trigger a write past the end of an allocated buffer, allowing an attacker to execute code in the context of the current process. Exploitation requires user interaction (vi...
CVE-2021-34896
CVE-2021-34896 affects Bentley View 10.15.0.75 and is caused by improper validation of the length of user-supplied data during BMP file parsing, leading to a heap-based buffer overflow. The vulnerability allows an attacker to execute arbitrary code in the context of the current process after the ...
CVE-2021-34895
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34895
Bentley View 3DS file parsing vulnerability (CVE-2021-34895) allows remote code execution by exploiting a use-after-free/object- existence check flaw. Affected product/version: Bentley View 10.15.0.75. Attack requires user interaction (target visits a malicious page or opens a malicious file). Ro...