CVE-2013-0079

2013-03-1300:55:01

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.898

Percentile

98.8%

JSON

Microsoft Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file that triggers incorrect memory allocation, aka “Visio Viewer Tree Object Type Confusion Vulnerability.”

Affected configurations

Nvd

Node

microsoftoffice_filter_packMatch2010sp1x64

microsoftoffice_filter_packMatch2010sp1x86

microsoftvisioMatch2010sp1x64

microsoftvisioMatch2010sp1x86

microsoftvisio_viewerMatch2010sp1x64

microsoftvisio_viewerMatch2010sp1x86

VendorProductVersionCPE
microsoftoffice_filter_pack2010cpe:2.3:a:microsoft:office_filter_pack:2010:sp1:x64:*:*:*:*:*
microsoftoffice_filter_pack2010cpe:2.3:a:microsoft:office_filter_pack:2010:sp1:x86:*:*:*:*:*
microsoftvisio2010cpe:2.3:a:microsoft:visio:2010:sp1:x64:*:*:*:*:*
microsoftvisio2010cpe:2.3:a:microsoft:visio:2010:sp1:x86:*:*:*:*:*
microsoftvisio_viewer2010cpe:2.3:a:microsoft:visio_viewer:2010:sp1:x64:*:*:*:*:*
microsoftvisio_viewer2010cpe:2.3:a:microsoft:visio_viewer:2010:sp1:x86:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	office_filter_pack	2010	cpe:2.3:a:microsoft:office_filter_pack:2010:sp1:x64:::::*
microsoft	office_filter_pack	2010	cpe:2.3:a:microsoft:office_filter_pack:2010:sp1:x86:::::*
microsoft	visio	2010	cpe:2.3:a:microsoft:visio:2010:sp1:x64:::::*
microsoft	visio	2010	cpe:2.3:a:microsoft:visio:2010:sp1:x86:::::*
microsoft	visio_viewer	2010	cpe:2.3:a:microsoft:visio_viewer:2010:sp1:x64:::::*
microsoft	visio_viewer	2010	cpe:2.3:a:microsoft:visio_viewer:2010:sp1:x86:::::*