Lucene search

K
cve[email protected]CVE-2011-1979
HistoryAug 10, 2011 - 9:55 p.m.

CVE-2011-1979

2011-08-1021:55:00
CWE-20
web.nvd.nist.gov
29
cve-2011-1979
microsoft visio
remote code execution
file parsing
memory validation

7.4 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.819 High

EPSS

Percentile

98.4%

Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka β€œMove Around the Block RCE Vulnerability.”

7.4 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.819 High

EPSS

Percentile

98.4%