| Package | Affected versions | Patched versions |
|---|---|---|
| visual studio | = 2002= 2003= 2005= 2010≤ 2012 |
msdia.dll in Microsoft Debug Interface Access (DIA) SDK, as distributed in Microsoft Visual Studio before 2013, does not properly validate an unspecified variable before use in calculating a dynamic-call address, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDB file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free