CVE-2011-1972

The CVE-2011-1972 issue affects Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold/SP1. It stems from improper in-memory validation of objects during Visio file parsing, enabling remote code execution when a specially crafted Visio file is opened. Multiple sources corroborate a memory-corruption s...

CVE-2011-1972

Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "pStream Release RCE Vulnerability."...

CVE-2011-1979

Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "Move Around the Block RCE Vulnerability."...

Microsoft Visio CVE-2011-1972远程代码执行漏洞

Bugtraq ID: 49024 Microsoft Visio是一款微软开发的流程图软件。 在解析特制的Visio文件时，Microsoft Visio校验内存中对象存在一个远程代码执行漏洞，攻击者构建恶意文件，诱使用户解析，可以应用程序上下文执行任意代码 Microsoft Visio 2010 SP1 Microsoft Visio 2010 0 Microsoft Visio 2007 SP2 Microsoft Visio 2007 SP1 Microsoft Visio 2007 0 Microsoft Visio 2003 Standard Microsoft Visio...

CVE-2011-1979: Improper Input Validation

Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "Move Around the Block RCE Vulnerability."...

Microsoft Office Visio security vulnerabilities

Memory corruption on Visio files parsing...

Microsoft Visio CVE-2011-1979远程代码执行漏洞

Bugtraq ID: 49021 CVE ID：CVE-2011-1979 Microsoft Visio是一款微软开发的流程图软件。 在解析特制的Visio文件时，Microsoft Visio校验内存中对象存在一个远程代码执行漏洞，攻击者构建恶意文件，诱使用户解析，可以应用程序上下文执行任意代码 Microsoft Visio 2007 SP2 Microsoft Visio 2007 SP1 Microsoft Visio 2007 0 Microsoft Visio 2003 Standard Microsoft Visio 2003 Professional Microsof...

CVE-2011-1972: Improper Input Validation

Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "pStream Release RCE Vulnerability."...

Patch Tuesday: Microsoft Releases 13 Bulletins, 2 Critical

Microsoft shipped 13 bulletins in the August edition of Patch Tuesday, including two critical fixes for the Internet Explorer Browser and for Windows DNS Server that the company warns could enable remote attacks. The scheduled monthly update includes a a cumulative security update for Internet...

Microsoft Office Visio UMLString Code Execution (MS11-060; CVE-2011-1971)

A remote code execution vulnerability has been reported in Microsoft Visio. The vulnerability is due to insufficient validation by Microsoft Visio when processing UMLString data in Visio files. A remote attacker could exploit this issue by enticing an unsuspecting user to download and open a...

Microsoft Visio CVE-2011-1972 Remote Code Execution Vulnerability

Description Microsoft Visio is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected...

Microsoft Visio CVE-2011-1979 Remote Code Execution Vulnerability

Description Microsoft Visio is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected...

MS11-060: Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (2560978)

The remote host contains a version of Microsoft Visio that is affected by multiple remote code execution vulnerabilities. A remote attacker could exploit these issues by tricking a user into opening a specially crafted Microsoft Visio file, resulting in arbitrary code execution. C Tenable Network...

Microsoft Office Visio UML Parsing Use After Free (MS11-060; CVE-2011-1972)

Microsoft Visio is a diagram creation software for Microsoft Windows. A remote code execution vulnerability has been reported in Microsoft Office Visio. The vulnerability is due to the improper way in which the application validates objects in memory when parsing specially crafted Visio files. An...

Microsoft Visio 2003 "mfc71enu.dll" DLL加载远程代码执行漏洞(MS11-055)

BUGTRAQ ID: 42681 CVE ID: CVE-2010-3148 Microsoft Visio是Windows 操作系统下运行的流程图软件，它现在是Microsoft Office软件的一个部分。 Microsoft Visio在实现上存在不安全库加载漏洞，远程攻击者可利用此漏洞控制受影响系统。 此漏洞源于以不安全的方式加载应用程序库（例如mfc71enu.dll和mfc71loc.dll），通过诱使用户打开位于远程WebDAV或SMB共享上的Microsoft Visio Stencil ".vss"文件，造成加载任意库。 Microsoft Visio 2003...

Microsoft Visio insecure DLL loading

Unsafe DLL loading on associated files opening...

Microsoft Visio Remote Code Execution Vulnerability (2560847)

This host is missing an important security update according to Microsoft Bulletin MS11-055. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Visio Remote Code Execution Vulnerability (2560847)

This host is missing an important security update according to Microsoft Bulletin MS11-055. OpenVAS Vulnerability Test $Id: secpodms11-055.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Visio Remote Code Execution Vulnerability 2560847 Authors: Antu Sanadi Copyright c 2011 SecPod,...

Microsoft Office Visio 2003 mfc71enu.dll Insecure Library Loading (MS11-055; CVE-2010-3148)

A remote code execution vulnerability has been reported in Microsoft Visio 2003. Remote attackers could trigger this flaw by enticing a user to open a specially crafted Visio-related file. Successful exploitation may enable an attacker to install programs; view, change, or delete data; or create...

MS11-055: Vulnerability in Microsoft Visio Could Allow Remote Code Execution (2560847)

The remote host contains a version of Microsoft Visio that is affected by an insecure library loading vulnerability. A remote attacker could exploit this by tricking a user into opening a specially crafted Microsoft Visio file, resulting in arbitrary code execution. C Tenable Network Security, In...