Microsoft Print 3D app Remote Code Execution (February 2023)

The Microsoft Print 3D app installed on the remote Windows host may be affected by a remote code execution vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. The...

Update now! February's Patch Tuesday tackles three zero-days

The Patch Tuesday roundup from Microsoft for February 2023 includes three zero-days. Not exactly what we had in mind for Valentine's Day. Microsoft classifies a vulnerability as a zero-day if it is publicly disclosed or actively exploited with no official fix available. As far as we can tell, onl...

CVE-2023-23378

Print 3D Remote Code Execution Vulnerability...

CVE-2023-23378 Print 3D Remote Code Execution Vulnerability

...

CVE-2023-23378

CVE-2023-23378 affects Microsoft Print 3D (and related 3D tools) with a remote/code execution impact described in sources as a Print 3D/3D Builder issue. The PT-2023-1400 entry attributes the flaw to insufficient input validation in Print 3D, allowing arbitrary code execution via crafted files (O...