CVE-2011-1972: Input Validation
Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "pStream Release RCE Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1972?
CVE-2011-1972 has a critical severity rating due to its potential to allow remote code execution.
How do I fix CVE-2011-1972?
To fix CVE-2011-1972, apply the appropriate security update provided by Microsoft for the affected versions of Visio.
Which versions of Microsoft Visio are affected by CVE-2011-1972?
CVE-2011-1972 affects Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1.
Can CVE-2011-1972 allow attackers to gain control of my system?
Yes, CVE-2011-1972 can enable attackers to execute arbitrary code, potentially gaining control of the affected system.
Is there a workaround for CVE-2011-1972 if I cannot update immediately?
There are no official workarounds for CVE-2011-1972, therefore it is highly recommended to apply updates as soon as possible.