CVE-2011-1979 in Visio

Summary

Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "Move Around the Block RCE Vulnerability."

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 05/09/2011
• Disclosure: 08/10/2011
• Moderation: VulDB entry created
• Entries: 1: VDB-58240
• CPE: ready
• CWE: CWE-20 (Confirmed)
• CVSS: 10.0
• EPSS: 0.57892
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-1979
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-1979
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-1979/