Memory Corruption Vulnerability in Microsoft Visio Viewer 2010
CVE-2012-0138

Currently unrated

Key Information:

Vendor
Microsoft
Status
Visio Viewer
Vendor
CVE Published:
14 February 2012

Summary

Microsoft Visio Viewer 2010 Gold and SP1 contains a vulnerability due to improper memory handling when parsing crafted attribute data within Visio files. This flaw allows remote attackers to exploit the vulnerability to execute arbitrary code on affected systems. Successful exploitation can result in significant system compromises, leading to unauthorized access and data breaches, emphasizing the need for timely updates and security measures.

References

http://www.us-cert.gov/cas/techalerts/TA12-045A.html
third-party-advisoryx_refsource_CERT
https://oval.cisecurity.org/repository/search/definition/...
vdb-entrysignaturex_refsource_OVAL
https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS

EPSS Score

41% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.