high7.6Public exploit code
CVE-2010-1681
Buffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted remote attackers to execute arbitrary code via a crafted DXF …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Visio - 'VISIODWG.dll .DXF' File Handling (MS10-028) (Metasploit)2011-06-26 · local · windows · Verified
- Microsoft Visio 2002 - '.DXF' Local Stack Overflow2010-09-08 · local · windows · Verified
Impact
Buffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted remote attackers to execute arbitrary code via a crafted DXF file, a different vulnerability than CVE-2010-0254 and CVE-2010-0256.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Visio | Versions 2002, 2003, 2007 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.coresecurity.com/content/ms-visio-dxf-buffer-overflow
- http://www.exploit-db.com/exploits/14944
- http://www.securityfocus.com/archive/1/511121/100/0/threaded
- http://www.securityfocus.com/bid/39836
- http://www.securitytracker.com/id?1023938
- http://www.coresecurity.com/content/ms-visio-dxf-buffer-overflow
- http://www.exploit-db.com/exploits/14944
- http://www.securityfocus.com/archive/1/511121/100/0/threaded
- http://www.securityfocus.com/bid/39836
- http://www.securitytracker.com/id?1023938