critical9.3
CVE-2009-0095
Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly validate object data in Visio files, which allows remote attackers to execute arbitra…
Impact
Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly validate object data in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Memory Validation Vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Visio | Versions 2002, 2003, 2007 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.us-cert.gov/cas/techalerts/TA09-041A.html
- http://www.vupen.com/english/advisories/2009/0391
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-005
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6179
- http://www.us-cert.gov/cas/techalerts/TA09-041A.html
- http://www.vupen.com/english/advisories/2009/0391
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-005
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6179