CVE-2014-3802 says that it
allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDB file.
The ZDI page says that:
User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
I'm unclear on how this vulnerability is activated. PDB files are used when debugging programs, does this mean that the vulnerability is only present when someone placed a malicious PDB file on the target machine and is debugging the program?