Microsoft Visio multiple security vulnerabilities
Published:		11.02.2009
Source:		BUGTRAQ
SecurityVulns ID:		9672
Type:		client
Level:		5/10
Description:		Multiple memory corruptions.

Affected:		MICROSOFT : Visio 2002
		MICROSOFT : Visio 2003
		MICROSOFT : Visio 2007
CVE:		CVE-2009-0097 (Microsoft Office Visio 2002 SP2 and 2003 SP3 does not properly validate memory allocation for Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Memory Corruption Vulnerability.")
		CVE-2009-0096 (Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly perform memory copy operations for object data, which allows remote attackers to execute arbitrary code via a crafted Visio document, aka "Memory Corruption Vulnerability.")
		CVE-2009-0095 (Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly validate object data in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Memory Validation Vulnerability.")

Original document

MICROSOFT, Microsoft Security Bulletin MS09-005 - Important Vulnerabilities in Microsoft Office Visio Could Allow Remote Code Execution (957634) (11.02.2009)

Files:		Microsoft Security Bulletin MS09-005 - Important Vulnerabilities in Microsoft Office Visio Could Allow Remote Code Execution (957634)
Discuss:		Read or add your comments to this news (0 comments)