WID-SEC-W-2023-2325

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Microsoft 3D Builder und Viewer: Mehrere Schwachstellen ermöglichen Codeausführung

view advisory published 2023-09-12

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft 3D Builder und Microsoft 3D Viewer ausnutzen, um beliebigen Programmcode auszuführen.

01

describes (8)

Related CVEs.

IDseverity exploitable
CVE-2023-36773US——
3D Builder Remote Code Execution Vulnerability
CVE-2023-36772US——
3D Builder Remote Code Execution Vulnerability
CVE-2023-36771US——
3D Builder Remote Code Execution Vulnerability
CVE-2023-36770US——
3D Builder Remote Code Execution Vulnerability
CVE-2023-36760US——
3D Viewer Remote Code Execution Vulnerability
CVE-2023-36740US——
3D Viewer Remote Code Execution Vulnerability
CVE-2023-36739US——
3D Viewer Remote Code Execution Vulnerability
CVE-2022-41303UShigh7.8—
A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in Autodesk FBX SDK 2020 version causing the application to reference a mem…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan