ZDI-24-1095: (0Day) Microsoft Office Visio DXF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 3.3.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-1095?
ZDI-24-1095 is classified as a medium severity vulnerability.
How do I fix ZDI-24-1095?
To mitigate ZDI-24-1095, ensure that you apply the latest security updates from Microsoft for Office Visio.
What type of information can be disclosed by exploiting ZDI-24-1095?
Exploiting ZDI-24-1095 can potentially disclose sensitive information stored on affected installations.
What is required for an attacker to exploit ZDI-24-1095?
An attacker must trick a user into visiting a malicious page or opening a malicious file to exploit ZDI-24-1095.
Which software is affected by ZDI-24-1095?
ZDI-24-1095 specifically affects installations of Microsoft Office Visio.