Heap overflow

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-34900

Bentley View 10.15.0.75 is affected by CVE-2021-34900. The flaw is in J2K file parsing and stems from failing to validate the length of user-supplied data before copying into a heap buffer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or openin...