CVE-2021-34889

Bentley View 10.15.0.75 is affected by a 3DS file parsing vulnerability described as an out-of-bounds/read-past-end condition. The flaw stems from insufficient validation of user-supplied data during 3DS parsing, allowing information disclosure and, in conjunction with other vulnerabilities, pote...

CVE-2021-34888

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-34888

Bentley View 10.15.0.75 is affected by CVE-2021-34888 via a vulnerability in JT file parsing. The flaw stems from improper validation of user-supplied data, causing a read past the end of an allocated buffer and enabling information disclosure; it could be leveraged with other flaws to execute ar...

CVE-2021-34887

Bentley View 10.15.0.75 is affected by a PDF parsing out-of-bounds read vulnerability. The issue stems from insufficient validation of user-supplied data, causing a read past the end of an allocated buffer. This can lead to sensitive information disclosure and, in conjunction with other vulnerabi...

CVE-2021-34886

Bentley View 10.15.0.75 is affected by CVE-2021-34886. The issue lies in FBX file parsing where the code does not validate the existence of an object before performing operations, enabling information disclosure. Multiple sources (NVD, Red Hat, CVE records, ZDI advisory) describe this as a use-af...

CVE-2021-34886

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-34885

Bentley View 10.15.0.75 is affected by a JT file parsing out-of-bounds read that allows remote code execution. Exploitation requires user interaction (visit a malicious page/open a malicious JT file). The issue is documented via ZDI-21-1474 (referred to as ZDI-CAN-14838). Mitigation: Bentley rele...

CVE-2021-34884

Bentley View 10.15.0.75 is affected by a JP2 file parsing vulnerability. The root cause is a use-after-release style flaw where the parser does not validate the existence of an object before performing operations, enabling information disclosure. The ZDI advisory (ZDI-21-1473) confirms this as a ...

CVE-2021-34883

Bentley View 10.15.0.75 is affected by CVE-2021-34883 due to a flaw in J2K file parsing. The issue stems from insufficient validation of user-supplied data, causing a read past the end of an allocated buffer and leading to sensitive information disclosure. Successful exploitation requires user in...

CVE-2021-34883

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-34882

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

CVE-2021-34882

Bentley View 10.15.0.75 is affected by a JP2 file parsing vulnerability that enables information disclosure through an out-of-bounds read, caused by insufficient validation of user-supplied data. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The i...

CVE-2021-34881

Bentley View 10.15.0.75 is affected by a vulnerability in OBJ file parsing that allows information disclosure through an out-of-bounds read. The issue stems from insufficient validation of user-supplied data, potentially enabling an attacker to read beyond allocated buffers. Exploitation requires...

CVE-2021-34880

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34880

Bentley View 10.15.0.75 is affected by CVE-2021-34880 due to a flaw in 3DS file parsing that can trigger a read past the end of an allocated buffer. This enables remote code execution in the context of the current process and requires user interaction (visiting a malicious page or opening a malic...

CVE-2021-34879

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34879

Bentley View 10.15.0.75 is affected by a J2K File Parsing vulnerability (memory misreference/use-after-free) that allows code execution. The issue arises from not validating the existence of an object before performing operations during J2K parsing, enabling an attacker to execute code with the c...

CVE-2021-34878

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34878

Bentley View 10.15.0.75 is affected by CVE-2021-34878 due to a vulnerability in JT file parsing that can trigger a write past the end of an allocated buffer, allowing remote code execution. The attack requires user interaction (visiting a malicious page or opening a malicious JT file) and leverag...

CVE-2021-34877

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...