CVE-2009-0095: Critical severity Microsoft Visio vulnerability
Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly validate object data in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Memory Validation Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0095?
CVE-2009-0095 is classified as a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2009-0095?
The recommended fix for CVE-2009-0095 is to apply the latest security updates provided by Microsoft for the affected versions of Visio.
Which versions of Microsoft Visio are affected by CVE-2009-0095?
CVE-2009-0095 affects Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP1.
What type of attack does CVE-2009-0095 enable?
CVE-2009-0095 enables remote attackers to execute arbitrary code by exploiting crafted Visio files.
Can CVE-2009-0095 be exploited without user interaction?
Yes, CVE-2009-0095 can be exploited by opening a malicious Visio file, which may not require any user interaction beyond that.