CVE:CVE-2022-28309
CNNVD:CNNVD-202204-2572
Bentley Systems Bentley View是美国Bentley Systems公司的一个免费查看器。
Bentley View 10.16.02.022版本存在缓冲区错误漏洞。攻击者利用该漏洞通过包含恶意数据的3DS文件强制触发越界读取。
solution:Upgrade bentley microstation to a higher version than 10.16.03,and avoid the version (,10.16.03); Upgrade bentley view to a higher version than 10.16.03,and avoid the version (,10.16.03)