ID CVE-2020-17003
Summary A remote code execution vulnerability exists when the Base3D rendering engine improperly handles memory.An attacker who successfully exploited the vulnerability would gain execution on a victim system.The security update addresses the vulnerability by correcting how the Base3D rendering engine handles memory., aka 'Base3D Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-16918.
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:3d_viewer:-:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:3d_viewer:-:*:*:*:*:*:*:*
CVSS
Base: 9.3 (as of 21-10-2020 - 19:45)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:C/I:C/A:C
Last major update 21-10-2020 - 19:45
Published 16-10-2020 - 23:15
Last modified 21-10-2020 - 19:45
Back to Top