ZDI-CAN-19066: ZDI-24-979: Microsoft Office Visio DXF File Parsing Integer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-19066?
The severity of ZDI-CAN-19066 is high as it allows remote attackers to execute arbitrary code on affected installations.
How do I fix ZDI-CAN-19066?
To fix ZDI-CAN-19066, update Microsoft Office Visio to the latest version provided by Microsoft.
What type of attack does ZDI-CAN-19066 enable?
ZDI-CAN-19066 enables remote code execution attacks requiring user interaction with malicious files or pages.
Which software is affected by ZDI-CAN-19066?
ZDI-CAN-19066 affects Microsoft Office Visio installations.
Is user interaction necessary to exploit ZDI-CAN-19066?
Yes, user interaction is required, as the targeted user must visit a malicious page or open a malicious file.