CVE-2016-3235

CVE-2016-3235 corresponds to a Microsoft Office OLE DLL side-loading vulnerability. Affected products include Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016 and Visio Viewer (2007/2010 variants). The root cause is improper library loading validation, allowing a crafted file or applica...

CVE-2013-1301

CVE-2013-1301 concerns Microsoft Visio information disclosure via XML External Entities (XXE). The vulnerability arises when Visio processes XML documents containing external entity declarations, allowing a remote attacker to read arbitrary files. Affected products include Visio 2003 SP3, Visio 2...

CVE-2015-2503

CVE-2015-2503 is an Office Elevation of Privilege vulnerability that can be triggered via a crafted web site loaded in Internet Explorer to bypass sandbox protections and gain privileges. The initial CVE entry lists Microsoft Office 2007–2016 products (Word, Excel, PowerPoint, Access, InfoPath, V...

CVE-2008-1089

CVE-2008-1089 (Visio Object Header Vulnerability) affects Microsoft Visio 2002 SP2, 2003 SP2/SP3, and 2007 up to SP1. The flaw stems from improper validation of object header data when opening Visio files, which could allow a remote attacker to execute arbitrary code on a vulnerable system. Explo...

CVE-2016-0012

CVE-2016-0012 affects Microsoft Office suite (2007–2016 and related components) and is described as a security feature/ASLR bypass vulnerability. Connected OpenVAS entries explicitly reference remote bypass vectors in Office components (PowerPoint, Visio, Word, Excel, VB runtime) and note exploit...

CVE-2008-1090

CVE-2008-1090 is a Visio memory validation vulnerability in Microsoft Visio 2002 SP2, 2003 SP2/SP3, and 2007 up to SP1. A remote attacker could exploit memory allocation handling when loading specially crafted .DXF files from disk, leading to remote code execution if a user opens the file. The vu...

CVE-2015-2423

CVE-2015-2423 is an “Unsafe Command Line Parameter Passing” vulnerability affecting a broad set of Windows OS versions (Vista through Windows 10) and Office apps (2007–2013) where a crafted command-line parameter to an Office app or Notepad can elevate from Low to Medium Integrity and disclose se...

CVE-2009-0096

Summary: CVE-2009-0095, CVE-2009-0096, and CVE-2009-0097 are memory-related vulnerabilities in Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1. The flaws involve validation or memory handling when parsing Visio files, allowing remote code execution if a user opens a specially crafted Visi...

CVE-2009-0097

CVE-2009-0097 is a remote-code-execution memory-corruption vulnerability in Microsoft Office Visio when opening Visio files. It is described as a memory-validation/memory-corruption issue in how Visio handles object data during file parsing, allowing an attacker to execute arbitrary code via a cr...

CVE-2011-1972

The CVE-2011-1972 issue affects Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold/SP1. It stems from improper in-memory validation of objects during Visio file parsing, enabling remote code execution when a specially crafted Visio file is opened. Multiple sources corroborate a memory-corruption s...

CVE-2009-0095

Summary: CVE-2009-0095 is a remote code execution vulnerability in Microsoft Office Visio, affecting Visio 2002 SP2, Visio 2003 SP3, and Visio 2007 SP1. It stems from improper validation of object data when opening Visio files, allowing a crafted file to execute arbitrary code on a vulnerable sys...

CVE-2015-2557

CVE-2015-2557 is a memory corruption vulnerability in Microsoft Visio 2007 SP3 and Visio 2010 SP2 that enables remote code execution via specially crafted UML data in an Office document. Root cause: buffer/memory corruption while parsing input. Impact: remote attacker can execute arbitrary code i...

CVE-2010-1681

CVE-2010-1681 is a buffer overflow in VISIODWG.DLL of Microsoft Office Visio triggered by parsing inserted DXF files. Affects Visio versions using VISIODWG.DLL prior to 10.0.6880.4 (patched in KB979364 / MS10-028); original vulnerable library version cited as 10.0.5006.4. Core Security CoreLabs d...

CVE-2011-1979

CVE-2011-1979 in Microsoft Visio affects Visio 2003 SP3 and 2007 SP2, caused by insufficient validation of in-memory objects during Visio file parsing. This memory-validation flaw enables remote code execution via a specially crafted Visio file, with the attacker gaining the same privileges as th...

CVE-2010-0254

CVE-2010-0254 is a Visio memory‑corruption vulnerability in Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1/SP2. The flaw arises from improper validation of Visio file attributes, allowing a remote attacker to execute arbitrary code by opening a crafted Visio file. The issue is part of a ...

CVE-2011-0092

Microsoft Visio CVE-2011-0092 affects ORMELEMS.DLL in Visio 2002 SP2, 2003 SP3 and 2007 SP2. A malformed VisioDocument stream in a Visio file can trigger an exception handler that accesses an uninitialized object, causing memory corruption and remote code execution. The vulnerability is triggered...

CVE-2010-0256

CVE-2010-0256 is a remote-code-execution vulnerability in Microsoft Office Visio (2002 SP2, 2003 SP3, 2007 SP1/SP2) caused by how Visio computes indexes when handling specially crafted Visio files. The issue is a memory corruption in Visio Index Calculation (VISIOIDX) that could allow an attacker...

CVE-2011-0093

CVE-2011-0093 affects ELEMENTS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2, where improper parsing of structures during Visio file opening allows remote code execution. The root cause is memory corruption from processing certain attributes in Visio files, enabling an attacker to run a...