ZDI-24-1088: (0Day) Microsoft 3D Viewer GLB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft 3D Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-1088?
The severity of ZDI-24-1088 is significant due to its potential for sensitive information disclosure.
Who is affected by ZDI-24-1088?
ZDI-24-1088 affects installations of Microsoft 3D Viewer.
How do I fix ZDI-24-1088?
To fix ZDI-24-1088, ensure that you have installed the latest security updates from Microsoft.
Does ZDI-24-1088 require user interaction to exploit?
Yes, ZDI-24-1088 requires user interaction, such as visiting a malicious page or opening a malicious file.
What type of information can be disclosed due to ZDI-24-1088?
ZDI-24-1088 may allow attackers to disclose sensitive information from the affected Microsoft 3D Viewer installations.