Lucene search

K
cve[email protected]CVE-2012-0137
HistoryFeb 14, 2012 - 10:55 p.m.

CVE-2012-0137

2012-02-1422:55:01
CWE-94
web.nvd.nist.gov
120
cve-2012-0137
microsoft visio viewer
memory corruption
file parsing
remote code execution

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.706 High

EPSS

Percentile

98.1%

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka β€œVSD File Format Memory Corruption Vulnerability,” a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0136, and CVE-2012-0138.

Affected configurations

NVD
Node
microsoftvisio_viewerMatch2010
OR
microsoftvisio_viewerMatch2010sp1

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.706 High

EPSS

Percentile

98.1%