ZDI-CAN-18521: ZDI-23-754: (0Day) Microsoft 3D Viewer FBX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Published May 31, 2023
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft 3D Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
1 affected component
Microsoft 3D Viewer
Event History
May 31, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-18521?
The severity of ZDI-CAN-18521 is critical due to the potential for remote code execution.
2
How do I fix ZDI-CAN-18521?
To fix ZDI-CAN-18521, users should update Microsoft 3D Viewer to the latest version provided by Microsoft.
3
What software is affected by ZDI-CAN-18521?
ZDI-CAN-18521 affects Microsoft 3D Viewer.
4
What type of attack does ZDI-CAN-18521 facilitate?
ZDI-CAN-18521 allows for the execution of arbitrary code on the affected system when manipulated by a remote attacker.
5
Is user interaction required to exploit ZDI-CAN-18521?
Yes, user interaction is required as the target must visit a malicious page or open a malicious file.