CVE-2010-0254: Code Injection
Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Visio Attribute Validation Memory Corruption Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0254?
CVE-2010-0254 is considered critical due to its potential to allow remote code execution.
How do I fix CVE-2010-0254?
To fix CVE-2010-0254, install the security updates provided by Microsoft for the affected Visio versions.
Which versions of Microsoft Visio are affected by CVE-2010-0254?
CVE-2010-0254 affects Microsoft Visio 2002 SP2, 2003 SP3, 2007 SP1, and 2007 SP2.
What is the nature of the vulnerability CVE-2010-0254?
CVE-2010-0254 is a memory corruption vulnerability that occurs due to improper validation of attributes in Visio files.
Can CVE-2010-0254 be exploited through email attachments?
Yes, CVE-2010-0254 can be exploited by opening a specially crafted Visio file received as an email attachment.