MS08-019: Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (949032)

The remote host contains a version of Microsoft Visio that has a vulnerability in the way it handles object headers and validates memory which could be used by an attacker to execute arbitrary code on the remote host. To exploit this vulnerability, an attacker would need to spend a specially...

Microsoft Office不安全文档签名漏洞

Microsoft Office 2007是一款微软开发的流行的办公处理应用程序。 Microsoft Office 2007不安全对基于XML文档的签名，远程攻击者可以利用漏洞伪造签名，使目标用户盲目信任文档。 Microsoft Office文档根据文件中docProps/core.xml的DublinCore metadata来携带META数据信息，在这些META数据信息中"LastModifiedBy", "creator"字段可通过"Office Button - Prepare -...

Update Protection against Microsoft Visio Remote Code Execution Vulnerabilities (MS07-030)

Multiple remote code execution vulnerabilities have been reported in Microsoft Visio. Microsoft Visio is diagram creation software for Microsoft Windows. A remote attacker can exploit these vulnerabilities via a specially crafted Visio file. Successful exploitation may allow execution of arbitrar...

Microsoft Visio版本号内存破坏漏洞（MS07-030）

Microsoft Visio是Office套件中用于绘制流程图的软件。 Microsoft Visio处理Visio文件中特制版本号的方式存在内存破坏漏洞，成功利用此漏洞的攻击者可能完全控制受影响的系统。 当Visio处理文件内容期间不能正确地验证版本号时，就可能触发这个漏洞。攻击者可能通过创建恶意Visio（.VSD、.VSS或.VST）文件诱使用户打开处理来利用此漏洞，如果用户访问恶意网站或打开电子邮件中包含的特制Visio附件，则这些文件可能允许远程执行代指令。 Microsoft Visio 2003 Microsoft Visio 2002 临时解决方法：...

Microsoft Visio文档封装远程代码执行漏洞（MS07-030）

Microsoft Visio是Office套件中用于绘制流程图的软件。 Microsoft Visio解析Visio文件格式中的打包对象的方式存在内存破坏漏洞，成功利用此漏洞的攻击者可能完全控制受影响的系统。 攻击者可能通过创建恶意Visio（.VSD、.VSS或.VST）文件诱使用户打开处理来利用此漏洞，如果用户访问恶意网站或打开电子邮件中包含的特制Visio附件，则这些文件可能允许远程执行指令。 Microsoft Visio 2003 Microsoft Visio 2002 临时解决方法： 不要打开或保存从不受信任来源或从受信任来源意外收到的Microsoft Visio文件。...

MS07-030: Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (927051)

The remote host contains a version of Microsoft Visio that has a vulnerability in the way it handles packed objects and version numbers that could be abused by an attacker to execute arbitrary code on the remote host. To exploit this vulnerability, an attacker would need to spend a specially...

CVE-2007-0934

Unspecified vulnerability in Microsoft Visio 2002 allows remote user-assisted attackers to execute arbitrary code via a Visio .VSD, VSS, .VST file with a crafted version number that triggers memory corruption...

CVE-2007-0936

Multiple unspecified vulnerabilities in Microsoft Visio 2002 allow remote user-assisted attackers to execute arbitrary code via a Visio .VSD, VSS, .VST file with a crafted packed object that triggers memory corruption, aka "Visio Document Packaging Vulnerability."...

Memory corruption

Multiple unspecified vulnerabilities in Microsoft Visio 2002 allow remote user-assisted attackers to execute arbitrary code via a Visio .VSD, VSS, .VST file with a crafted packed object that triggers memory corruption, aka "Visio Document Packaging Vulnerability."...

Memory corruption

Unspecified vulnerability in Microsoft Visio 2002 allows remote user-assisted attackers to execute arbitrary code via a Visio .VSD, VSS, .VST file with a crafted version number that triggers memory corruption...

CVE-2007-0936

Multiple unspecified vulnerabilities in Microsoft Visio 2002 allow remote user-assisted attackers to execute arbitrary code via a Visio .VSD, VSS, .VST file with a crafted packed object that triggers memory corruption, aka "Visio Document Packaging Vulnerability."...

CVE-2007-0934

Unspecified vulnerability in Microsoft Visio 2002 allows remote user-assisted attackers to execute arbitrary code via a Visio .VSD, VSS, .VST file with a crafted version number that triggers memory corruption...

CVE-2007-0936

Visio Document Packaging Vulnerability (CVE-2007-0936) in Microsoft Visio 2002/2003—memory corruption triggered by parsing a packed object in Visio files (.VSD/.VSS/.VST). Allows remote code execution when a crafted Visio file is opened. Affected software includes Visio 2002 (SP2) and Visio 2003 ...

CVE-2007-0934

CVE-2007-0934 is a Microsoft Visio memory-corruption/remote code-execution issue in the version-number handling of Visio files (.VSD/.VSS/.VST). A crafted Visio file could be opened by a user to trigger arbitrary code execution. The related CVE-2007-0936 (Visio Document Packaging) covers improper...

Microsoft Security Bulletin MS07-030 - Important Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (927051)

Microsoft Security Bulletin MS07-030 - Important Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution 927051 Published: June 12, 2007 Version: 1.0 General Information Executive Summary This important update resolves two privately discovered and responsibly reported vulnerabilities...

Microsoft Visio Version Number Remote Code Execution Vulnerability

Description Microsoft Visio is prone to a remote code-execution vulnerability because it fails to adequately validate user-supplied data. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Failed attempts will result in denial-of-service...

Microsoft Visio multiple security vulnerabilities

Multiple memory corruptions...

Microsoft Visio Packed Objects Remote Code Execution Vulnerability

Description Microsoft Visio is prone to a remote code-execution vulnerability because it fails to adequately handle user-supplied data. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Failed exploit attempts will result in a...

Microsoft Office And Microsoft Windows RichEdit Component Remote Code Execution Vulnerability

Description Microsoft Office and Microsoft Windows RichEdit component are prone to a remote code-execution vulnerability. This issue occurs when malformed Rich Text Files RTF are processed. An attacker could exploit this issue by enticing a victim to load a malicious RTF file. If the vulnerabilit...

Security Update for Visio 2002 (KB923273)

A security vulnerability exists in Microsoft Visio 2002 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...