CVE-2013-0079: Critical severity microsoft office filter pack vulnerability

Published Mar 13, 2013

Updated

Microsoft Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file that triggers incorrect memory allocation, aka "Visio Viewer Tree Object Type Confusion Vulnerability."

Affected Software

6 affected components

Microsoft Office Filter Pack=2010-sp1

Microsoft VISIO=2010-sp1

Microsoft Visio Viewer=2010-sp1

Event History

Mar 13, 2013

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-0079?

CVE-2013-0079 is categorized as critical due to its potential to allow remote code execution.

How do I fix CVE-2013-0079?

To fix CVE-2013-0079, install the latest security updates provided by Microsoft for Visio Viewer 2010 SP1.

What types of software are affected by CVE-2013-0079?

CVE-2013-0079 affects Microsoft Visio Viewer 2010 SP1, Microsoft Visio Professional 2010 SP1, and the Microsoft Office Filter Pack 2010 SP1.

What kind of attack does CVE-2013-0079 enable?

CVE-2013-0079 enables remote attackers to execute arbitrary code through a specially crafted Visio file.

In which environments is CVE-2013-0079 a concern?

CVE-2013-0079 is a concern in environments where Microsoft Visio Viewer 2010 SP1 or related software is used.