CVE-2021-46577

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.0.80. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...

CVE-2021-46577

Summary (supported): CVE-2021-46577 affects Bentley MicroStation CONNECT 10.16.0.80. The issue lies in the JT file parsing where the length of user-supplied data is not properly validated before being copied into a heap-based buffer, enabling a heap-based overflow. Impact: remote code execution i...