Описание
Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Visio Attribute Validation Memory Corruption Vulnerability."
Ссылки
- US Government Resource
- US Government Resource
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:visio:2003:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:visio:2007:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:visio:2007:sp2:*:*:*:*:*:*
EPSS
Процентиль: 95%
0.20483
Средний
7.6 High
CVSS2
Дефекты
CWE-94
Связанные уязвимости
github
почти 4 года назад
Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Visio Attribute Validation Memory Corruption Vulnerability."
EPSS
Процентиль: 95%
0.20483
Средний
7.6 High
CVSS2
Дефекты
CWE-94