ZDI-24-1094: (0Day) Microsoft Office Visio EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-1094?
The severity of ZDI-24-1094 is rated as high due to the potential for remote attackers to disclose sensitive information.
What software is affected by ZDI-24-1094?
ZDI-24-1094 affects Microsoft Office Visio installations.
How do I fix ZDI-24-1094?
To fix ZDI-24-1094, ensure that Microsoft Office Visio is updated to the latest version provided by Microsoft.
What type of attack does ZDI-24-1094 involve?
ZDI-24-1094 involves a remote attack that requires user interaction, such as visiting a malicious page or opening a malicious file.
Is user interaction required to exploit ZDI-24-1094?
Yes, user interaction is required to exploit ZDI-24-1094.