CVE-2007-0936: Critical severity Microsoft Office vulnerability

Published Jun 12, 2007

Updated

Multiple unspecified vulnerabilities in Microsoft Visio 2002 allow remote user-assisted attackers to execute arbitrary code via a Visio (.VSD, VSS, .VST) file with a crafted packed object that triggers memory corruption, aka "Visio Document Packaging Vulnerability."

Affected Software

2 affected components

Microsoft Office=2003

Microsoft VISIO=2002-sp2

Event History

Jun 12, 2007

CVE Published

07:30 PM

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0936?

CVE-2007-0936 is rated as a critical vulnerability due to potential remote code execution.

How do I fix CVE-2007-0936?

To fix CVE-2007-0936, ensure that you apply all relevant security updates provided by Microsoft for Visio 2002 and Office 2003.

What software is affected by CVE-2007-0936?

CVE-2007-0936 affects Microsoft Visio 2002 and Microsoft Office 2003.

What type of attack does CVE-2007-0936 facilitate?

CVE-2007-0936 can be exploited through user-assisted remote attacks by opening a specially crafted Visio file.

What is the impact of exploiting CVE-2007-0936?

Exploiting CVE-2007-0936 can lead to memory corruption, resulting in arbitrary code execution on the victim's machine.