Unrated severityNVD Advisory· Published May 20, 2014· Updated May 6, 2026
CVE-2014-3802
CVE-2014-3802
Description
msdia.dll in Microsoft Debug Interface Access (DIA) SDK, as distributed in Microsoft Visual Studio before 2013, does not properly validate an unspecified variable before use in calculating a dynamic-call address, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDB file.
Affected products
7- cpe:2.3:a:microsoft:debug_interface_access_software_development_kit:-:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*range: <=2012
- cpe:2.3:a:microsoft:visual_studio:2002:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:visual_studio:2003:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:visual_studio:2005:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:visual_studio:2010:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:visual_studio:2010:sp1:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.securityfocus.com/bid/67398nvdThird Party AdvisoryVDB Entry
- zerodayinitiative.com/advisories/ZDI-14-129/nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.