Lucene search
MicrosoftCVE-2011-1972HistoryAug 10, 2011 - 9:55 p.m.
CVE-2011-1972
2011-08-1021:55:01
CWE-20
microsoft
web.nvd.nist.gov
36
cve-2011-1972
microsoft visio
rce
vulnerability
memory validation
file parsing
remote code execution
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.5
Confidence
Low
EPSS
0.584
Percentile
97.8%
Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka βpStream Release RCE Vulnerability.β
Affected configurations
Node
microsoftvisioMatch2003sp3
ORmicrosoftvisioMatch2007sp2
ORmicrosoftvisioMatch2010x32
ORmicrosoftvisioMatch2010x64
ORmicrosoftvisioMatch2010sp1x32
ORmicrosoftvisioMatch2010sp1x64
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | visio | 2003 | cpe:2.3:a:microsoft:visio:2003:sp3:*:*:*:*:*:* |
| microsoft | visio | 2007 | cpe:2.3:a:microsoft:visio:2007:sp2:*:*:*:*:*:* |
| microsoft | visio | 2010 | cpe:2.3:a:microsoft:visio:2010:*:x32:*:*:*:*:* |
| microsoft | visio | 2010 | cpe:2.3:a:microsoft:visio:2010:*:x64:*:*:*:*:* |
| microsoft | visio | 2010 | cpe:2.3:a:microsoft:visio:2010:sp1:x32:*:*:*:*:* |
| microsoft | visio | 2010 | cpe:2.3:a:microsoft:visio:2010:sp1:x64:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2011-08-10 21:55:00
cvelist
cvelist
CVE-2011-1972
2011-08-10 21:16:00
symantec
symantec
Microsoft Visio CVE-2011-1972 Remote Code Execution Vulnerability
2011-08-09 00:00:00
seebug
seebug
Microsoft Visio CVE-2011-1972θΏη¨δ»£η ζ§θ‘ζΌζ΄
2011-08-10 00:00:00
nvd
nvd
CVE-2011-1972
2011-08-10 21:55:01
checkpoint_advisories
checkpoint_advisories
Microsoft Office Visio UML Parsing Use After Free (MS11-060; CVE-2011-1972)
2011-08-09 00:00:00
openvas
openvas
Microsoft Visio Remote Code Execution Vulnerabilities (2560978)
2011-08-11 00:00:00
Microsoft Visio Remote Code Execution Vulnerabilities (2560978)
2011-08-11 00:00:00
securityvulns
securityvulns
CORE-2011-0106: Microsoft Publisher 2007 Pubconv.dll Memory Corruption
2011-10-16 00:00:00
Microsoft Office Visio security vulnerabilities
2011-08-10 00:00:00
nessus
nessus
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.5
Confidence
Low
EPSS
0.584
Percentile
97.8%
Related for CVE-2011-1972