ZDI-CAN-19092: ZDI-23-005: Microsoft Office Visio DXF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-19092?
The severity of ZDI-CAN-19092 is considered high due to its ability to allow remote code execution.
How do I fix ZDI-CAN-19092?
To fix ZDI-CAN-19092, apply the latest security updates provided by Microsoft for Office Visio.
What versions of Microsoft Office Visio are affected by ZDI-CAN-19092?
ZDI-CAN-19092 affects all supported versions of Microsoft Office Visio.
Does ZDI-CAN-19092 require user interaction to exploit?
Yes, ZDI-CAN-19092 requires user interaction, as it involves opening a malicious file or visiting a malicious page.
What type of attacks can result from ZDI-CAN-19092?
ZDI-CAN-19092 can lead to remote code execution attacks, allowing attackers to execute arbitrary code on the affected system.