Microsoft Office Visio ELEMENTS.DLL Data Type Memory Corruption (MS11-008; CVE-2011-0093)

Microsoft Visio is a diagram creation software for Microsoft Windows. A remote code execution vulnerability has been identified in Microsoft Visio. The vulnerability is due to insufficient validation when Microsoft Visio is processing certain attributes in Visio files. A remote attacker may explo...

CVE-2011-0093

ELEMENTS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 does not properly parse structures during the opening of a Visio file, which allows remote attackers to execute arbitrary code via a file containing a malformed structure, aka "Visio Data Type Memory Corruption Vulnerability."...

CVE-2011-0093

CVE-2011-0093 affects ELEMENTS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2, where improper parsing of structures during Visio file opening allows remote code execution. The root cause is memory corruption from processing certain attributes in Visio files, enabling an attacker to run a...

Microsoft Visio Data Type Memory Corruption (CVE-2011-0093) Remote Code Execution Vulnerability

Description Microsoft Visio is prone to a remote code-execution vulnerability because it fails to adequately handle user-supplied data. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Failed exploit attempts will result in a...