Description
Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Visio Attribute Validation Memory Corruption Vulnerability."
References
- oval:org.mitre.oval:def:6819 vdb-entry signature
- MS10-028 vendor-advisory
- TA10-103A third-party-advisory