Skip to main content

Microsoft Office Visio Multiple Vulnerabilities( 11 February 2009 )

Last Update Date: 28 Jan 2011 Release Date: 11 Feb 2009 4489 Views

RISK: Medium Risk

1. Memory Validation Vulnerability

A remote code execution vulnerability exists in the way Microsoft Office Visio validates object data when opening up Visio files. An attacker could exploit the vulnerability by sending a specially crafted file which could be included as an e-mail attachment, or hosted on a specially crafted or compromised Web site.

2. Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way Microsoft Office Visio copies object data in memory. An attacker could exploit the vulnerability by sending a malformed file which could be included as an e-mail attachment, or hosted on a specially crafted or compromised Web site.

3. Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way Microsoft Office Visio handles memory when opening up Visio files. An attacker could exploit the vulnerability by sending a specially crafted file which could be included as an e-mail attachment, or hosted on a specially crafted or compromised Web site.


Impact

  • Remote Code Execution

System / Technologies affected

  • Microsoft Office Visio 2002
  • Microsoft Office Visio 2003
  • Microsoft Office Visio 2007

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Download locations for this patch


Vulnerability Identifier


Source


Related Link