CVE-2021-34877

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34877

Bentley View 10.15.0.75 is affected by CVE-2021-34877 due to an out-of-bounds write in JT file parsing. A crafted JT file can trigger code execution in the current process, requiring user interaction (visiting a malicious page or opening a malicious file). Related disclosures (ZDI-21-1465, CNVD/C...