CVE-2022-35903

An issue was discovered in Bentley MicroStation before 10.17.0.x and Bentley View before 10.17.0.x. Using an affected version of MicroStation or MicroStation-based application to open a 3DS file containing crafted data can force an out-of-bounds read. Exploitation of these vulnerabilities within the parsing of 3DS files could enable an attacker to read information in the context of the current process.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:bentley:microstation:*:*:*:*:*:*:*:*
cpe:2.3:a:bentley:view:*:*:*:*:*:*:*:*

History

21 Jul 2022, 14:41

Type Values Removed Values Added
References (MISC) https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0010 - (MISC) https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0010 - Vendor Advisory
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 3.3
CPE cpe:2.3:a:bentley:microstation:*:*:*:*:*:*:*:*
cpe:2.3:a:bentley:view:*:*:*:*:*:*:*:*
CWE CWE-125

15 Jul 2022, 23:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-07-15 23:15

Updated : 2024-02-04 22:51


NVD link : CVE-2022-35903

Mitre link : CVE-2022-35903

CVE.ORG link : CVE-2022-35903


JSON object : View

Products Affected

bentley

  • view
  • microstation
CWE
CWE-125

Out-of-bounds Read