CVE-2022-28643

CVE-2022-28643 affects Bentley MicroStation CONNECT 10.16.02.34. The vulnerability arises from the parsing of DGN files; crafted data can trigger a write past the end of an allocated buffer, allowing remote code execution in the current process. User interaction is required (visiting a malicious ...

CVE-2022-28643

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley MicroStation CONNECT 10.16.02.34. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists...