ZDI-24-1093: (0Day) Microsoft Office Visio EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-1093?
The severity of ZDI-24-1093 is classified as high due to its potential to disclose sensitive information.
How do I fix ZDI-24-1093?
To fix ZDI-24-1093, users should apply the latest security updates provided by Microsoft for Office Visio.
Who can exploit ZDI-24-1093?
ZDI-24-1093 can be exploited by remote attackers who are able to lure users into visiting a malicious page or opening a malicious file.
What versions of Microsoft Office Visio are affected by ZDI-24-1093?
ZDI-24-1093 affects all installations of Microsoft Office Visio that have not been updated with the latest security patches.
Is user interaction required to exploit ZDI-24-1093?
Yes, user interaction is required to exploit ZDI-24-1093, as the target must visit a malicious page or open a malicious file.