CVE-2020-17003: falha de alta gravidade em Microsoft 3D Viewer
Base3D Remote Code Execution Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.8epss 4.2%
<p>A remote code execution vulnerability exists when the Base3D rendering engine improperly handles memory.</p>
<p>An attacker who successfully exploited the vulnerability would gain execution on a victim system.</p>
<p>The security update addresses the vulnerability by correcting how the Base3D rendering engine handles memory.</p>
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Produtos afetados
Microsoft · 3D ViewerCVEs relacionadas — Microsoft 3D Viewer
No mesmo produto, das mais perigosas para as menos.
CVE-2021-43209HIGH3D Viewer Remote Code Execution VulnerabilityEPSS 6.8%CVE-2021-43208HIGH3D Viewer Remote Code Execution VulnerabilityEPSS 4.3%CVE-2020-16918HIGHBase3D Remote Code Execution VulnerabilityEPSS 3.9%CVE-2024-20677HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 3.3%CVE-2021-31944MEDIUM3D Viewer Information Disclosure VulnerabilityEPSS 2.8%CVE-2021-31943HIGH3D Viewer Remote Code Execution VulnerabilityEPSS 2.4%