CVE-2014-3802

msdia.dll in Microsoft Debug Interface Access (DIA) SDK, as distributed in Microsoft Visual Studio before 2013, does not properly validate an unspecified variable before use in calculating a dynamic-call address, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDB file.

• CWE-20

• http://www.securityfocus.com/bid/67398Third Party Advisory, VDB Entry
• http://zerodayinitiative.com/advisories/ZDI-14-129/Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/67398Third Party Advisory, VDB Entry
• http://zerodayinitiative.com/advisories/ZDI-14-129/Third Party Advisory, VDB Entry

Published

May 20, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-3796VMware NSX 6.0 before 6.0.6, and vCloud Networking and Secur…
• CVE-2014-3797Cross-site scripting (XSS) vulnerability in VMware vCenter S…
• CVE-2014-3798The Windows Guest Tools in Citrix XenServer 6.2 SP1 and earl…
• CVE-2014-3799Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2014-3800XBMC 13.0 uses world-readable permissions for .xbmc/userdata…
• CVE-2014-3801OpenStack Orchestration API (Heat) 2013.2 through 2013.2.3 a…
• CVE-2014-3803The SpeechInput feature in Blink, as used in Google Chrome b…
• CVE-2014-3804The av-centerd SOAP service in AlienVault OSSIM before 4.7.0…
• CVE-2014-3805The av-centerd SOAP service in AlienVault OSSIM before 4.7.0…
• CVE-2014-3806Directory traversal vulnerability in cgi-bin/help/doIt.cgi i…
• CVE-2014-3807Multiple cross-site scripting (XSS) vulnerabilities in Barra…
• CVE-2014-3808Multiple cross-site scripting (XSS) vulnerabilities in Barra…