ZDI-23-754: (0Day) Microsoft 3D Viewer FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Published May 31, 2023
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft 3D Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
1 affected component
Microsoft 3D Viewer
Event History
May 31, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-23-754?
The severity of ZDI-23-754 is critical due to the potential for remote code execution.
2
How do I fix ZDI-23-754?
To fix ZDI-23-754, you should update Microsoft 3D Viewer to the latest version provided by Microsoft.
3
Who is affected by ZDI-23-754?
Any users of Microsoft 3D Viewer are potentially affected by ZDI-23-754.
4
What are the requirements to exploit ZDI-23-754?
Exploitation of ZDI-23-754 requires user interaction, such as visiting a malicious webpage or opening a malicious file.
5
What can attackers do by exploiting ZDI-23-754?
By exploiting ZDI-23-754, attackers can execute arbitrary code on the affected system.