CVE-2009-0097: Critical severity Microsoft Visio vulnerability
Published Feb 10, 2009
·Updated
Microsoft Office Visio 2002 SP2 and 2003 SP3 does not properly validate memory allocation for Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Memory Corruption Vulnerability."
Affected Software
3 affected components
Microsoft Visio=2002-sp2
Microsoft Visio=2003-sp3
Microsoft Visio=2007-sp1
Event History
Feb 10, 2009
CVE Published
via MITRE·10:13 PM
Data Sourced
via MITRE·10:13 PM
Description
Data Sourced
via NVD·10:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-0097?
CVE-2009-0097 is rated as critical due to the potential for remote code execution.
2
How do I fix CVE-2009-0097?
To mitigate CVE-2009-0097, users should apply the latest security updates provided by Microsoft for affected versions of Visio.
3
What versions of Microsoft Visio are affected by CVE-2009-0097?
CVE-2009-0097 affects Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP1.
4
What type of vulnerability is CVE-2009-0097?
CVE-2009-0097 is classified as a memory corruption vulnerability that can lead to arbitrary code execution.
5
Can CVE-2009-0097 be exploited through email attachments?
Yes, CVE-2009-0097 can be exploited by opening a malicious Visio file sent via email.