QID 91974

Date Published: 2023-01-12

QID 91974: Microsoft 3D Builder Remote Code Execution (RCE) Vulnerability for January 2023

3D Builder is an application to View, Create, and Personalize 3D objects.
Microsoft has released a security update to 3D Builder Application to address a remote code execution vulnerability.

Affected Versions:
3D Builder Version prior to 20.0.1.0

QID Detection Logic:
This QID gets the version of 3D Builder by querying wmi class Win32_InstalledStoreProgram.

An attacker can perform a Remote Code Execution Vulnerability on a vulnerable version of 3D Builder.

CVSS V3 rated as High - 7.8 severity.

CVSS V2 rated as High - 6.8 severity.

Solution

Customers are advised to install latest version of Application from 3D Builder Application.

Vendor References

CVE-2023-21780 - msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21780
CVE-2023-21781 - msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21781
CVE-2023-21782 - msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21782
CVE-2023-21783 - msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21783
CVE-2023-21784 - msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21784
CVE-2023-21785 - msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21785
CVE-2023-21786 - msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21786
CVE-2023-21787 - msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21787
CVE-2023-21788 - msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21788
CVE-2023-21789 - msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21789
CVE-2023-21790 - msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21790
CVE-2023-21791 - msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21791
CVE-2023-21792 - msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21792
CVE-2023-21793 - msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21793

CVEs related to QID 91974

CVE-2023-21780 | CVE-2023-21787 | CVE-2023-21785 | CVE-2023-21783 | CVE-2023-21793 | CVE-2023-21791 | CVE-2023-21786 | CVE-2023-21784 | CVE-2023-21782 | CVE-2023-21781 | CVE-2023-21792 | CVE-2023-21790 | CVE-2023-21789 | CVE-2023-21788 |

Software Advisories

Advisory ID	Software	Component	Link
3D Builder Application			apps.microsoft.com/store/detail/3d-builder/9WZDNCRFJ3T6

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].