CVE-2009-0096: Critical severity Microsoft Visio vulnerability
Published Feb 10, 2009
·Updated
Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly perform memory copy operations for object data, which allows remote attackers to execute arbitrary code via a crafted Visio document, aka "Memory Corruption Vulnerability."
Affected Software
3 affected components
Microsoft Visio=2002-sp2
Microsoft Visio=2003-sp3
Microsoft Visio=2007-sp1
Event History
Feb 10, 2009
CVE Published
via MITRE·10:13 PM
Data Sourced
via MITRE·10:13 PM
Description
Data Sourced
via NVD·10:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-0096?
CVE-2009-0096 is rated as critical due to its potential to allow remote code execution.
2
How do I fix CVE-2009-0096?
To fix CVE-2009-0096, apply the latest security updates provided by Microsoft for the affected versions of Visio.
3
What versions of Microsoft Visio are affected by CVE-2009-0096?
CVE-2009-0096 affects Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP1.
4
What type of attack is possible with CVE-2009-0096?
CVE-2009-0096 allows remote attackers to execute arbitrary code via a crafted Visio document.
5
How can organizations mitigate the risks associated with CVE-2009-0096?
Organizations can mitigate risks by restricting access to Visio files from untrusted sources and ensuring all software is up to date.