Microsoft Visio Viewer File Format Code Execution (MS12-015; CVE-2012-0138)

A remote code execution vulnerability has been reported in Microsoft Visio Viewer...

Microsoft Visio Viewer VSD File Format CVE-2012-0020 Remote Code Execution Vulnerability

Description Microsoft Visio Viewer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected...

Microsoft Visio Viewer VSD File Format Memory Corruption (MS12-015; CVE-2012-0019)

A remote code execution vulnerability has been reported in Microsoft Visio Viewer...

MS11-089: Description of the security update for Visio 2010: December 13, 2011

Describes the security update for Microsoft Visio 2010 that was released on December 13, 2011.INTRODUCTIONMicrosoft has released security bulletin MS11-089. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

MS11-093 Microsoft Windows OLE Object File Handling Remote Code Execution

This module exploits a type confusion vulnerability in the OLE32 component of Windows XP SP3. The vulnerability exists in the CPropertyStorage::ReadMultiple function. A Visio document with a specially crafted Summary Information Stream embedded allows to get remote code execution through Internet...

Microsoft Office Visio Global Buffer Overflow (MS11-060; CVE-2011-1979)

A remote code execution vulnerability has been reported in Microsoft Office Visio. The vulnerability is due insufficient validation of the Length value while handling UML String objects in office Visio files. A remote attacker could exploit this vulnerability by enticing a target user to open a...

Microsoft Visio Remote Code Execution Vulnerabilities (2560978)

This host is missing an important security update according to Microsoft Bulletin MS11-060. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Visio Remote Code Execution Vulnerabilities (2560978)

This host is missing an important security update according to Microsoft Bulletin MS11-060. OpenVAS Vulnerability Test $Id: secpodms11-060.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Visio Remote Code Execution Vulnerabilities 2560978 Authors: Antu Sanadi Copyright c 2011 SecPod,...

CVE-2011-1979

Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "Move Around the Block RCE Vulnerability."...

CVE-2011-1972

Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "pStream Release RCE Vulnerability."...

Design/Logic Flaw

Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "Move Around the Block RCE Vulnerability."...

Design/Logic Flaw

Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "pStream Release RCE Vulnerability."...

CVE-2011-1979

CVE-2011-1979 in Microsoft Visio affects Visio 2003 SP3 and 2007 SP2, caused by insufficient validation of in-memory objects during Visio file parsing. This memory-validation flaw enables remote code execution via a specially crafted Visio file, with the attacker gaining the same privileges as th...

CVE-2011-1972

The CVE-2011-1972 issue affects Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold/SP1. It stems from improper in-memory validation of objects during Visio file parsing, enabling remote code execution when a specially crafted Visio file is opened. Multiple sources corroborate a memory-corruption s...

CVE-2011-1972

Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "pStream Release RCE Vulnerability."...

CVE-2011-1979

Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "Move Around the Block RCE Vulnerability."...

Microsoft Visio CVE-2011-1972远程代码执行漏洞

Bugtraq ID: 49024 Microsoft Visio是一款微软开发的流程图软件。 在解析特制的Visio文件时，Microsoft Visio校验内存中对象存在一个远程代码执行漏洞，攻击者构建恶意文件，诱使用户解析，可以应用程序上下文执行任意代码 Microsoft Visio 2010 SP1 Microsoft Visio 2010 0 Microsoft Visio 2007 SP2 Microsoft Visio 2007 SP1 Microsoft Visio 2007 0 Microsoft Visio 2003 Standard Microsoft Visio...

Microsoft Office Visio security vulnerabilities

Memory corruption on Visio files parsing...

Microsoft Visio CVE-2011-1979远程代码执行漏洞

Bugtraq ID: 49021 CVE ID：CVE-2011-1979 Microsoft Visio是一款微软开发的流程图软件。 在解析特制的Visio文件时，Microsoft Visio校验内存中对象存在一个远程代码执行漏洞，攻击者构建恶意文件，诱使用户解析，可以应用程序上下文执行任意代码 Microsoft Visio 2007 SP2 Microsoft Visio 2007 SP1 Microsoft Visio 2007 0 Microsoft Visio 2003 Standard Microsoft Visio 2003 Professional Microsof...

Patch Tuesday: Microsoft Releases 13 Bulletins, 2 Critical

Microsoft shipped 13 bulletins in the August edition of Patch Tuesday, including two critical fixes for the Internet Explorer Browser and for Windows DNS Server that the company warns could enable remote attacks. The scheduled monthly update includes a a cumulative security update for Internet...