ZDI-23-347: Bentley View SKP File Parsing Use-After-Free Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Bentley View. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-347?
The severity of ZDI-23-347 is classified as a medium risk due to the requirement of user interaction for exploitation.
How do I fix ZDI-23-347?
To fix ZDI-23-347, update Bentley View to the latest version provided by the vendor that addresses this vulnerability.
Who is affected by ZDI-23-347?
Users of Bentley View are affected by ZDI-23-347, particularly those who may encounter malicious web pages or files.
What kind of information can be disclosed due to ZDI-23-347?
ZDI-23-347 can lead to the disclosure of sensitive information depending on the nature of the attack and the compromised system.
Is user interaction necessary for ZDI-23-347?
Yes, user interaction is necessary for ZDI-23-347 as the target must visit a malicious page or open a harmful file to exploit the vulnerability.