CVE-2010-0256: Code Injection
Published Apr 14, 2010
·Updated
Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly calculate unspecified indexes associated with Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Visio Index Calculation Memory Corruption Vulnerability."
Affected Software
4 affected components
Microsoft Visio=2002-sp2
Microsoft Visio=2003-sp3
Microsoft Visio=2007-sp1
Microsoft Visio=2007-sp2
Event History
Apr 14, 2010
CVE Published
via MITRE·03:44 PM
Data Sourced
via MITRE·03:44 PM
Description
Data Sourced
via NVD·04:00 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-0256?
CVE-2010-0256 is classified as a critical vulnerability that can allow remote code execution.
2
How do I fix CVE-2010-0256?
To mitigate CVE-2010-0256, users should apply the latest security updates released by Microsoft.
3
Which versions of Microsoft Visio are affected by CVE-2010-0256?
CVE-2010-0256 affects Microsoft Visio 2002 SP2, 2003 SP3, 2007 SP1, and 2007 SP2.
4
What type of attack is enabled by CVE-2010-0256?
CVE-2010-0256 allows attackers to execute arbitrary code by exploiting crafted Visio files.
5
Is there a workaround for CVE-2010-0256?
The best practice is to update affected versions of Microsoft Visio, as no official workaround is provided.