CVE-2014-3802
msdia.dll in Microsoft Debug Interface Access (DIA) SDK, as distributed in Microsoft Visual Studio before 2013, does not properly validate an unspecified variable before use in calculating a dynamic-call address, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDB file.
View on NVDSeverity
N/A
EPSS
Probability of exploitation (next 30 days): 0.0959 (9.6%)
Percentile: 92.9%
EPSS: 2026-05-06
Affects
microsoft:debug_interface_access_software_development_kitmicrosoft:visual_studioTechnical description
msdia.dll in Microsoft Debug Interface Access (DIA) SDK, as distributed in Microsoft Visual Studio before 2013, does not properly validate an unspecified variable before use in calculating a dynamic-call address, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDB file.
Published: 5/20/2014, 11:55:05 PM
Last modified: 5/6/2026, 10:30:45 PM