CVE-2014-3802

published 2014-05-20

CVE-2014-3802: msdia.dll in Microsoft Debug Interface Access (DIA) SDK, as distributed in Microsoft Visual Studio before 2013, does not properly validate an unspecified…

Priority P3 40 medium 6.8 CVSS 2.0

AV N AC M Au N C P I P A P

msdia.dll in Microsoft Debug Interface Access (DIA) SDK, as distributed in Microsoft Visual Studio before 2013, does not properly validate an unspecified variable before use in calculating a dynamic-call address, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDB file.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
microsoft	visual_studio	<= 2012	—
microsoft	visual_studio	—	—
microsoft	visual_studio	—	—
microsoft	visual_studio	—	—
microsoft	visual_studio	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20