ZDI-23-753: (0Day) Microsoft 3D Viewer PLY File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft 3D Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-753?
The severity of ZDI-23-753 is classified as moderate due to the potential for sensitive information disclosure.
How do I fix ZDI-23-753?
To fix ZDI-23-753, ensure that users do not visit untrusted pages or open malicious files while using Microsoft 3D Viewer.
What type of attack is associated with ZDI-23-753?
ZDI-23-753 is associated with remote information disclosure attacks that require user interaction.
Who is affected by the ZDI-23-753 vulnerability?
Users of Microsoft 3D Viewer are affected by the ZDI-23-753 vulnerability.
Is user interaction necessary for the exploitation of ZDI-23-753?
Yes, user interaction is necessary for the exploitation of ZDI-23-753, as the target must visit a malicious page or open a malicious file.