ZDI-CAN-19052: ZDI-23-753: (0Day) Microsoft 3D Viewer PLY File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Published May 31, 2023

Updated

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft 3D Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Affected Software

1 affected component

Microsoft 3D Viewer

Event History

May 31, 2023

Advisory Published

05:00 AM

Data Sourced

05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-19052?

The severity of ZDI-CAN-19052 is considered moderate due to the requirement for user interaction to exploit it.

How do I fix ZDI-CAN-19052?

To fix ZDI-CAN-19052, ensure that you are using the latest version of Microsoft 3D Viewer with all security updates applied.

What is affected by ZDI-CAN-19052?

ZDI-CAN-19052 affects installations of Microsoft 3D Viewer.

Who can exploit ZDI-CAN-19052?

Remote attackers can exploit ZDI-CAN-19052, but user interaction is required for the exploitation to occur.

What kind of information does ZDI-CAN-19052 disclose?

ZDI-CAN-19052 allows remote attackers to disclose sensitive information from the affected installations.