Lucene search

K
cve[email protected]CVE-2012-0138
HistoryFeb 14, 2012 - 10:55 p.m.

CVE-2012-0138

2012-02-1422:55:00
CWE-94
web.nvd.nist.gov
114
microsoft
visio
viewer
2010
gold
sp1
memory corruption
vulnerability
cve-2012-0138
nvd
code execution

7.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.633 Medium

EPSS

Percentile

97.8%

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka β€œVSD File Format Memory Corruption Vulnerability,” a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0136, and CVE-2012-0137.

7.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.633 Medium

EPSS

Percentile

97.8%