CVE-2012-0020: Improper Control of Generation of Code

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019...

Microsoft Visio Viewer VSD File Format CVE-2012-0020 Remote Code Execution Vulnerability

Description Microsoft Visio Viewer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected...

CVE-2012-0138: Improper Control of Generation of Code

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019...

PT-2012-2340

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019...

PT-2012-2245

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0020...

PT-2012-2246

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019...

Microsoft Visio Viewer VSD File Format CVE-2012-0138 Remote Code Execution Vulnerability

Description Microsoft Visio Viewer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected...

MS11-089: Description of the security update for Visio 2010: December 13, 2011

Describes the security update for Microsoft Visio 2010 that was released on December 13, 2011.INTRODUCTIONMicrosoft has released security bulletin MS11-089. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

MS11-093 Microsoft Windows OLE Object File Handling Remote Code Execution

This module exploits a type confusion vulnerability in the OLE32 component of Windows XP SP3. The vulnerability exists in the CPropertyStorage::ReadMultiple function. A Visio document with a specially crafted Summary Information Stream embedded allows to get remote code execution through Internet...

Microsoft Office Visio Global Buffer Overflow (MS11-060; CVE-2011-1979)

A remote code execution vulnerability has been reported in Microsoft Office Visio. The vulnerability is due insufficient validation of the Length value while handling UML String objects in office Visio files. A remote attacker could exploit this vulnerability by enticing a target user to open a...

Microsoft Visio Remote Code Execution Vulnerabilities (2560978)

This host is missing an important security update according to Microsoft Bulletin MS11-060. OpenVAS Vulnerability Test $Id: secpodms11-060.nasl 5362 2017-02-20 12:46:39Z cfi $ Microsoft Visio Remote Code Execution Vulnerabilities 2560978 Authors: Antu Sanadi Copyright c 2011 SecPod,...

Microsoft Visio Remote Code Execution Vulnerabilities (2560978)

This host is missing an important security update according to Microsoft Bulletin MS11-060. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2011-1979

Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "Move Around the Block RCE Vulnerability."...

CVE-2011-1972

Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "pStream Release RCE Vulnerability."...

Design/Logic Flaw

Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "Move Around the Block RCE Vulnerability."...

Design/Logic Flaw

Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "pStream Release RCE Vulnerability."...

CVE-2011-1979

Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "Move Around the Block RCE Vulnerability."...

CVE-2011-1979

CVE-2011-1979 in Microsoft Visio affects Visio 2003 SP3 and 2007 SP2, caused by insufficient validation of in-memory objects during Visio file parsing. This memory-validation flaw enables remote code execution via a specially crafted Visio file, with the attacker gaining the same privileges as th...

CVE-2011-1972

The CVE-2011-1972 issue affects Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold/SP1. It stems from improper in-memory validation of objects during Visio file parsing, enabling remote code execution when a specially crafted Visio file is opened. Multiple sources corroborate a memory-corruption s...

CVE-2011-1972

Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "pStream Release RCE Vulnerability."...