Memory Corruption Vulnerability in Microsoft Visio Viewer 2010
CVE-2012-0136

Currently unrated

Key Information:

Vendor
Microsoft
Status
Visio Viewer
Vendor
CVE Published:
14 February 2012

Summary

The memory corruption vulnerability in Microsoft Visio Viewer 2010 can be exploited by remote attackers through specially crafted attributes in a Visio file. This flaw occurs during the parsing process of the file, potentially allowing unauthorized execution of arbitrary code. Users of Visio Viewer 2010 Gold and SP1 are particularly at risk and should ensure they apply the latest security updates and patches to mitigate the threat.

References

http://www.us-cert.gov/cas/techalerts/TA12-045A.html
third-party-advisoryx_refsource_CERT
https://oval.cisecurity.org/repository/search/definition/...
vdb-entrysignaturex_refsource_OVAL
https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS

EPSS Score

41% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.