CVE-2012-0137

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0136, and CVE-2012-0138.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microsoft:visio_viewer:2010:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:visio_viewer:2010:sp1:*:*:*:*:*:*

Information

Published : 2012-02-14 14:55

Updated : 2018-10-12 15:02


NVD link : CVE-2012-0137

Mitre link : CVE-2012-0137


JSON object : View

CWE
CWE-94

Improper Control of Generation of Code ('Code Injection')

Advertisement

dedicated server usa

Products Affected

microsoft

  • visio_viewer