Description
Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly validate object data in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Memory Validation Vulnerability."
References
- ADV-2009-0391 vdb-entry
- oval:org.mitre.oval:def:6179 vdb-entry signature
- MS09-005 vendor-advisory
- TA09-041A third-party-advisory