ZDI-23-1465: Microsoft Visual Studio FBX File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Visual Studio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3. The following CVEs are assigned: CVE-2022-35825.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-1465?
The severity of ZDI-23-1465 is classified as moderate due to the requirement for user interaction for exploitation.
How do I fix ZDI-23-1465?
To fix ZDI-23-1465, ensure that you apply the latest security updates provided by Microsoft for Visual Studio.
What type of information does ZDI-23-1465 disclose?
ZDI-23-1465 may disclose sensitive information from affected installations of Microsoft Visual Studio.
What is required to exploit ZDI-23-1465?
Exploitation of ZDI-23-1465 requires user interaction, such as visiting a malicious page or opening a malicious file.
Which software is affected by ZDI-23-1465?
ZDI-23-1465 affects Microsoft Visual Studio installations.