Skip to content
OpenAdvisories
Medium WID-SEC-2023-2325 8 CVEs

Microsoft 3D Builder und Viewer: Mehrere Schwachstellen ermöglichen Codeausführung

Published Sep 12, 2023 · Updated Sep 12, 2023 · de-DE

Vendor: Microsoft Product: 3D Builder < 20.0.4.0 Product: 3D Viewer < 7.2306.12012.0 Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft 3D Builder und Microsoft 3D Viewer ausnutzen, um beliebigen Programmcode auszuführen.

Product

Microsoft 3D Builder ist eine Software zur Erstellung von 3D Modellen, z.B. für den 3D Druck.
Microsoft 3D Viewer ist eine Betrachtungssoftware für 3D Modelle und Animationen.

Vulnerabilities 8

  • High 7.8
    CVE-2022-41303

    A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in Autodesk FB…

  • High 7.8
    CVE-2023-36739

    3D Viewer Remote Code Execution Vulnerability

    3D Viewer Remote Code Execution Vulnerability

    Microsoft 3D Viewer
  • High 7.8
    CVE-2023-36740

    3D Viewer Remote Code Execution Vulnerability

    3D Viewer Remote Code Execution Vulnerability

    Microsoft 3D Viewer
  • High 7.8
    CVE-2023-36760

    3D Viewer Remote Code Execution Vulnerability

    3D Viewer Remote Code Execution Vulnerability

    Microsoft 3D Viewer
  • High 7.8
    CVE-2023-36770

    3D Builder Remote Code Execution Vulnerability

    3D Builder Remote Code Execution Vulnerability

    Microsoft 3D Builder
  • High 7.8
    CVE-2023-36771

    3D Builder Remote Code Execution Vulnerability

    3D Builder Remote Code Execution Vulnerability

    Microsoft 3D Builder
  • High 7.8
    CVE-2023-36772

    3D Builder Remote Code Execution Vulnerability

    3D Builder Remote Code Execution Vulnerability

    Microsoft 3D Builder
  • High 7.8
    CVE-2023-36773

    3D Builder Remote Code Execution Vulnerability

    3D Builder Remote Code Execution Vulnerability

    Microsoft 3D Builder

Revision history

  1. #1

    Initiale Fassung

References