ZDI-23-1461: Microsoft Visual Studio FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Visual Studio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2022-35825.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-1461?
The severity of ZDI-23-1461 is high, as it allows remote code execution if exploited.
How do I fix ZDI-23-1461?
To fix ZDI-23-1461, ensure that Microsoft Visual Studio is updated to the latest version provided by Microsoft.
What are the potential impacts of ZDI-23-1461?
The potential impacts of ZDI-23-1461 include unauthorized remote code execution and potential data loss.
Is user interaction required to exploit ZDI-23-1461?
Yes, user interaction is required, as the target must visit a malicious page or open a malicious file.
Which software is affected by ZDI-23-1461?
The affected software for ZDI-23-1461 is Microsoft Visual Studio.