Lucene search

K
cve[email protected]CVE-2010-0254
HistoryApr 14, 2010 - 4:00 p.m.

CVE-2010-0254

2010-04-1416:00:00
CWE-94
web.nvd.nist.gov
25
microsoft
office
visio
2002
2003
2007
attribute validation
memory corruption
vulnerability
cve-2010-0254

7.4 High

AI Score

Confidence

Low

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.422 Medium

EPSS

Percentile

97.3%

Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka “Visio Attribute Validation Memory Corruption Vulnerability.”

7.4 High

AI Score

Confidence

Low

7.6 High

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.422 Medium

EPSS

Percentile

97.3%