First published: Tue Feb 10 2009(Updated: )
Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly perform memory copy operations for object data, which allows remote attackers to execute arbitrary code via a crafted Visio document, aka "Memory Corruption Vulnerability."
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Visio Professional | =2002-sp2 | |
Microsoft Visio Professional | =2003-sp3 | |
Microsoft Visio Professional | =2007-sp1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2009-0096 is rated as critical due to its potential to allow remote code execution.
To fix CVE-2009-0096, apply the latest security updates provided by Microsoft for the affected versions of Visio.
CVE-2009-0096 affects Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP1.
CVE-2009-0096 allows remote attackers to execute arbitrary code via a crafted Visio document.
Organizations can mitigate risks by restricting access to Visio files from untrusted sources and ensuring all software is up to date.