ZDI-CAN-19176: ZDI-23-1770: Microsoft Office Visio EMF File Parsing Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Visio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-19176?
The severity of ZDI-CAN-19176 is determined to be high, as it allows remote code execution on affected installations.
How do I fix ZDI-CAN-19176?
To fix ZDI-CAN-19176, ensure that all Microsoft Office Visio installations are updated with the latest security patches released by Microsoft.
What is the attack vector for ZDI-CAN-19176?
The attack vector for ZDI-CAN-19176 involves user interaction, requiring the target to visit a malicious web page or open a malicious file.
What software is affected by ZDI-CAN-19176?
ZDI-CAN-19176 affects Microsoft Office Visio installations.
Is user interaction necessary to exploit ZDI-CAN-19176?
Yes, user interaction is necessary to exploit ZDI-CAN-19176, as the victim must engage with a malicious file or page.