Microsoft Office Visio security vulnerabilities
Published:		10.08.2011
Source:		MICROSOFT
SecurityVulns ID:		11841
Type:		client
Level:		6/10
Description:		Memory corruption on Visio files parsing.

Affected:		MICROSOFT : Visio 2003
		MICROSOFT : Visio 2007
		MICROSOFT : Visio 2010
CVE:		CVE-2011-1979 (Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "Move Around the Block RCE Vulnerability.")
		CVE-2011-1972 (Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "pStream Release RCE Vulnerability.")

Files:		Microsoft Security Bulletin MS11-060 - Important Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (2560978)
Discuss:		Read or add your comments to this news (0 comments)