CVE-2014-3802

Description

msdia.dll in Microsoft Debug Interface Access (DIA) SDK, as distributed in Microsoft Visual Studio before 2013, does not properly validate an unspecified variable before use in calculating a dynamic-call address, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDB file.

References

http://zerodayinitiative.com/advisories/ZDI-14-129/

http://www.securityfocus.com/bid/67398

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3