Microsoft to Patch 22 Flaws on July Patch Tuesday

Microsoft’s Patch Tuesday release next week will comprise four bulletins, one of which is rated critical, covering vulnerabilities in numerous versions of Windows as well as Visio 2003. The most serious of the vulnerabilities is a critical flaw affecting Windows 7 and Windows Vista. In total,...

Microsoft Office Visio VISIODWG.DLL DXF File Handling Vulnerability

No description provided by source. $Id: visiodxfbof.rb 13034 2011-06-26 16:09:53Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...

Microsoft Office Visio VISIODWG.DLL DXF File Handling Vulnerability

$Id: visiodxfbof.rb 13034 2011-06-26 16:09:53Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Microsoft Office Visio VISIODWG.DLL Crafted DXF File Handling Overflow

Exploit for windows platform in category local exploits $Id: visiodxfbof.rb 13030 2011-06-26 05:59:37Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

Microsoft Visio - 'VISIODWG.dll .DXF' File Handling (MS10-028) (Metasploit)

$Id: visiodxfbof.rb 13034 2011-06-26 16:09:53Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Microsoft Office Visio ORMELEMS.DLL Object Memory Corruption (MS11-008; CVE-2011-0092)

Microsoft Visio is a diagram creation software for Microsoft Windows. A remote code execution vulnerability has been identified in Microsoft Visio. The vulnerability is due to an error in Microsoft Visio while validating objects in memory. A remote attacker may exploit this issue by enticing a us...

Microsoft Office Visio ELEMENTS.DLL Data Type Memory Corruption (MS11-008; CVE-2011-0093)

Microsoft Visio is a diagram creation software for Microsoft Windows. A remote code execution vulnerability has been identified in Microsoft Visio. The vulnerability is due to insufficient validation when Microsoft Visio is processing certain attributes in Visio files. A remote attacker may explo...

Microsoft Visio multiple security vulnerabilities

Multiple memory corruptions...

ZDI-11-063: Microsoft Visio 2007 LZW Stream Decompression Exception Vulnerability

ZDI-11-063: Microsoft Visio 2007 LZW Stream Decompression Exception Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-063 February 8, 2011 -- CVE ID: CVE-2011-0092 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Other -- Vulnerability Details: This vulnerability allo...

CVE-2011-0093

ELEMENTS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 does not properly parse structures during the opening of a Visio file, which allows remote attackers to execute arbitrary code via a file containing a malformed structure, aka "Visio Data Type Memory Corruption Vulnerability."...

CVE-2011-0092

The LZW stream decompression functionality in ORMELEMS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 allows remote attackers to execute arbitrary code via a Visio file with a malformed VisioDocument stream that triggers an exception handler that accesses an object that has not been full...

Memory corruption

The LZW stream decompression functionality in ORMELEMS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 allows remote attackers to execute arbitrary code via a Visio file with a malformed VisioDocument stream that triggers an exception handler that accesses an object that has not been full...

Memory corruption

ELEMENTS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 does not properly parse structures during the opening of a Visio file, which allows remote attackers to execute arbitrary code via a file containing a malformed structure, aka "Visio Data Type Memory Corruption Vulnerability."...

CVE-2011-0092

Microsoft Visio CVE-2011-0092 affects ORMELEMS.DLL in Visio 2002 SP2, 2003 SP3 and 2007 SP2. A malformed VisioDocument stream in a Visio file can trigger an exception handler that accesses an uninitialized object, causing memory corruption and remote code execution. The vulnerability is triggered...

CVE-2011-0093

ELEMENTS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 does not properly parse structures during the opening of a Visio file, which allows remote attackers to execute arbitrary code via a file containing a malformed structure, aka "Visio Data Type Memory Corruption Vulnerability."...

CVE-2011-0093

CVE-2011-0093 affects ELEMENTS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2, where improper parsing of structures during Visio file opening allows remote code execution. The root cause is memory corruption from processing certain attributes in Visio files, enabling an attacker to run a...

CVE-2011-0092

The LZW stream decompression functionality in ORMELEMS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 allows remote attackers to execute arbitrary code via a Visio file with a malformed VisioDocument stream that triggers an exception handler that accesses an object that has not been full...

CVE-2011-0093: Improper Control of Generation of Code

ELEMENTS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 does not properly parse structures during the opening of a Visio file, which allows remote attackers to execute arbitrary code via a file containing a malformed structure, aka "Visio Data Type Memory Corruption Vulnerability."...

CVE-2011-0092: Improper Control of Generation of Code

The LZW stream decompression functionality in ORMELEMS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 allows remote attackers to execute arbitrary code via a Visio file with a malformed VisioDocument stream that triggers an exception handler that accesses an object that has not been full...

Microsoft Visio Remote Code Execution Vulnerabilities (2451879)

This host is missing a critical security update according to Microsoft Bulletin MS11-008. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...