CVE-2008-1090: Critical severity microsoft office vulnerability
Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a crafted .DXF file, aka "Visio Memory Validation Vulnerability."
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-1090?
CVE-2008-1090 is considered a critical severity vulnerability that allows remote code execution.
How do I fix CVE-2008-1090?
To fix CVE-2008-1090, users should install the latest patches provided by Microsoft for affected versions of Visio and Office.
Which versions of software are affected by CVE-2008-1090?
CVE-2008-1090 affects Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1.
What type of attack is enabled by CVE-2008-1090?
CVE-2008-1090 allows user-assisted remote attackers to execute arbitrary code via a crafted .DXF file.
Is there a workaround for CVE-2008-1090 until a patch is applied?
Disabling the opening of .DXF files or using alternative software can serve as a temporary workaround for CVE-2008-1090.