Microsoft Office CVE-2016-3235 DLL Loading Local Privilege Escalation Vulnerability

Description Microsoft Office is prone to a local privilege-escalation vulnerability. A local attacker can leverage this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Visio 2007 Service Pack 3 Microsoft Visio 2010 Service Pack 2 32-bit editions Microsoft...

PT-2016-2169 · Microsoft · Office Visio +1

Name of the Vulnerable Software and Affected Versions: Microsoft Visio versions 2007 SP3 through 2016 Microsoft Visio Viewer versions 2007 SP3 through 2010 Description: The issue is related to errors in library loading, which can allow a remote attacker to elevate their privileges using a special...

PT-2013-2083

Name of the Vulnerable Software and Affected Versions Microsoft Visio Viewer 2010 SP1 Description The issue allows remote attackers to execute arbitrary code via a crafted Visio file, triggering incorrect memory allocation due to a tree object type confusion. Recommendations For Microsoft Visio...

CVE-2013-0079: Undefined Security Weakness

Microsoft Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file that triggers incorrect memory allocation, aka "Visio Viewer Tree Object Type Confusion Vulnerability."...

CVE-2012-1888

CVE-2012-1888 concerns a buffer overflow in Microsoft Visio 2010 SP1 and Visio Viewer 2010 SP1 during DXF parsing. The root cause is a memory corruption flaw in the DWGDP.DLL while processing MTEXT strings in DXF files, potentially copying data beyond the stack. This allows remote code execution ...

CVE-2012-1888

Buffer overflow in Microsoft Visio 2010 SP1 and Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file, aka "Visio DXF File Format Buffer Overflow Vulnerability."...

Microsoft Office Visio/Viewer Remote Code Execution Vulnerability (2733918)

This host is missing an important security update according to Microsoft Bulletin MS12-059. OpenVAS Vulnerability Test $Id: secpodms12-059.nasl 5963 2017-04-18 09:02:14Z teissa $ Microsoft Office Visio/Viewer Remote Code Execution Vulnerability 2733918 Authors: Antu Sanadi Copyright: Copyright c...

CVE-2012-1888: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Microsoft Visio 2010 SP1 and Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file, aka "Visio DXF File Format Buffer Overflow Vulnerability."...

Microsoft OLE Object File Handling vulnerability

Added: 06/15/2012 CVE: CVE-2011-3400 BID: 50977 OSVDB: 77663 Background Object Linking and Embedding OLE allows applications to create and edit compound documents. For example, a Microsoft Excel spreadsheet can be embedded within a Microsoft Word application. Problem A vulnerability when handling...

Microsoft OLE Object File Handling vulnerability

Added: 06/15/2012 CVE: CVE-2011-3400 BID: 50977 OSVDB: 77663 Background Object Linking and Embedding OLE allows applications to create and edit compound documents. For example, a Microsoft Excel spreadsheet can be embedded within a Microsoft Word application. Problem A vulnerability when handling...

CVE-2012-0018

Microsoft Visio Viewer 2010 Gold and SP1 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "VSD File Format Memory Corruption Vulnerability."...

CVE-2012-0018: Improper Input Validation

Microsoft Visio Viewer 2010 Gold and SP1 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "VSD File Format Memory Corruption Vulnerability."...

PT-2012-2244

Name of the Vulnerable Software and Affected Versions Microsoft Visio Viewer 2010 versions Gold and SP1 Description The issue is related to the improper validation of attributes in Visio files, which can be exploited by remote attackers to execute arbitrary code via a crafted file. Recommendation...

Memory corruption

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0020...

Memory corruption

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019...

Memory corruption

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019...

PT-2012-2342

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019...

PT-2012-2245

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0020...

Microsoft Visio Viewer VSD File Format CVE-2012-0019 Remote Code Execution Vulnerability

Description Microsoft Visio Viewer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected...

MS12-015: Vulnerabilities in Microsoft Visio Viewer 2010 could allow remote code execution: February 14, 2012

Resolves security vulnerabilities that exist in Visio Viewer 2010 that could allow arbitrary code to run when a maliciously modified file is opened.IntroductionMicrosoft has released security bulletin MS12-015. To view the complete security bulletin, visit one of the following Microsoft websites:...