CVE-2014-3802 | BDVDB-2026-61694 Detail

Description#

msdia.dll in Microsoft Debug Interface Access (DIA) SDK, as distributed in Microsoft Visual Studio before 2013, does not properly validate an unspecified variable before use in calculating a dynamic-call address, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDB file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/67398
http://zerodayinitiative.com/advisories/ZDI-14-129/

Exploit#

No public exploit known

History#

Version 12014-05-20Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.