Lucene search

K
nvd[email protected]NVD:CVE-2010-0254
HistoryApr 14, 2010 - 4:00 p.m.

CVE-2010-0254

2010-04-1416:00:01
CWE-94
web.nvd.nist.gov

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.422 Medium

EPSS

Percentile

97.3%

Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka “Visio Attribute Validation Memory Corruption Vulnerability.”

Affected configurations

NVD
Node
microsoftvisioMatch2002sp2
OR
microsoftvisioMatch2003sp3
OR
microsoftvisioMatch2007sp1
OR
microsoftvisioMatch2007sp2

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

Low

0.422 Medium

EPSS

Percentile

97.3%