ZDI-CAN-19051: ZDI-24-1088: (0Day) Microsoft 3D Viewer GLB File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft 3D Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-19051?
ZDI-CAN-19051 has been categorized as a moderate severity vulnerability due to its potential to disclose sensitive information.
How do I fix ZDI-CAN-19051?
To mitigate ZDI-CAN-19051, ensure that your Microsoft 3D Viewer is updated to the latest version provided by Microsoft.
What type of attack is ZDI-CAN-19051 associated with?
ZDI-CAN-19051 is associated with remote attacks that require user interaction, such as visiting a malicious page or opening a harmful file.
What should users of Microsoft 3D Viewer be aware of regarding ZDI-CAN-19051?
Users of Microsoft 3D Viewer should be cautious with unknown links and files to avoid exploitation of ZDI-CAN-19051.
Is user interaction necessary for ZDI-CAN-19051 to be exploited?
Yes, user interaction is required to exploit ZDI-CAN-19051, as users must visit a malicious page or open a malicious file.