Unscored CVE-2011-1979 EUVD-2011-1973GHSA-jr54-2c44-3rq2

Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers…

Published Aug 10, 2011 · Updated Aug 6, 2024 · Assigned by microsoft

Description

Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "Move Around the Block RCE Vulnerability."

References

oval:org.mitre.oval:def:12659 vdb-entry signature
MS11-060 vendor-advisory
TA11-221A third-party-advisory