3 matches found
Design/Logic Flaw
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...
CVE-2021-34935
CVE-2021-34935 affects Bentley View 10.15.0.75 and is triggered by parsing JT files. The flaw is a write past the end of an allocated buffer in JT file parsing, allowing remote code execution in the context of the current process. Exploitation requires user interaction (visiting a malicious page ...
CVE-2021-44441
A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code ...