ZDI-23-1459: Microsoft Visual Studio DAE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2022-35825.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-1459?
The severity of ZDI-23-1459 is high, as it allows remote code execution on impacted Microsoft Visual Studio installations.
How do I fix ZDI-23-1459?
To fix ZDI-23-1459, you should update Microsoft Visual Studio to the latest version provided by Microsoft.
Who is affected by ZDI-23-1459?
Users of Microsoft Visual Studio are affected by ZDI-23-1459 if they visit a malicious webpage or open a malicious file.
What type of attack does ZDI-23-1459 enable?
ZDI-23-1459 enables remote attackers to execute arbitrary code on vulnerable installations of Microsoft Visual Studio.
Is user interaction required to exploit ZDI-23-1459?
Yes, user interaction is required for exploiting ZDI-23-1459, as the target must visit a malicious page or open a malicious file.