Tracker / CVE-2014-3802
CVE-2014-3802
Medium 6.8
msdia.dll in Microsoft Debug Interface Access (DIA) SDK, as distributed in Microsoft Visual Studio before 2013, does not properly validate an unspecified variable before use in calculating a dynamic-call address, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDB file.
Affected products and versions
| microsoft | debug_interface_access_software_development_kit |
|---|---|
| microsoft | visual_studio |
| microsoft | visual_studio · … → 2012 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.