CVE-2014-3802 Information

Description

msdia.dll in Microsoft Debug Interface Access (DIA) SDK as distributed in Microsoft Visual Studio before 2013 does not properly validate an unspecified variable before use in calculating a dynamic-call address which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDB file.

Reference

http://www.securityfocus.com/bid/67398 http://zerodayinitiative.com/advisories/ZDI-14-129/