Arbitrary Code Execution in Bentley MicroStation 10.16.02.034

CVE-2022-28300

Summary

This vulnerability in Bentley MicroStation allows attackers to execute arbitrary code by manipulating JP2 image files. To exploit the vulnerability, a user must open a specially crafted JP2 file or visit a malicious web page that hosts such a file, leading to a buffer overflow. Consequently, the attacker can execute code within the context of the current process, thereby compromising the system's integrity. Proper security measures should be adhered to mitigate the risks associated with this flaw.

References