Lucene search

K
cve[email protected]CVE-2009-0095
HistoryFeb 10, 2009 - 10:30 p.m.

CVE-2009-0095

2009-02-1022:30:00
CWE-399
web.nvd.nist.gov
54
cve-2009-0095
microsoft office
visio
memory validation
vulnerability

7.4 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.356 Low

EPSS

Percentile

97.1%

Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly validate object data in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka “Memory Validation Vulnerability.”

7.4 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.356 Low

EPSS

Percentile

97.1%