Buffer Overflow Vulnerability in Bentley View by Bentley Systems

CVE-2022-28309

Summary

This vulnerability allows remote attackers to disclose sensitive information from installations of Bentley View 10.16.02.022. It occurs when the software improperly parses 3DS files, where specially crafted data can result in a read past the end of an allocated buffer. Successful exploitation necessitates user interaction, requiring the target to visit a malicious webpage or open a harmful file. An attacker may leverage this flaw in combination with other vulnerabilities to execute arbitrary code within the context of the current process.

References