CVE-2010-1681 - Buffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted remote attackers to execute arbitrary code via a crafted DXF file, a different vulnerability than CVE-2010-0254 and CVE-2010-0256

Back Back to CVE browser

HIGH

Buffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted remote attackers to execute arbitrary code via a crafted DXF file, a different vulnerability than CVE-2010-0254 and CVE-2010-0256

Published May 5, 2010

7.6

HIGH

CVSS 2.0

EPSS 67.31%

Description

Buffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted remote attackers to execute arbitrary code via a crafted DXF file, a different vulnerability than CVE-2010-0254 and CVE-2010-0256.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (6)

http://www.coresecurity.com/content/ms-visio-dxf-buffer-overflow
x_refsource_MISC
http://www.exploit-db.com/exploits/14944
exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/archive/1/511121/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/39836
vdb-entryx_refsource_BIDPatch
http://www.securitytracker.com/id?1023938
vdb-entryx_refsource_SECTRACK
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-1701
Advisory

Link	Providers	Tags
http://www.coresecurity.com/content/ms-visio-dxf-buffer-overflow		x_refsource_MISC
http://www.exploit-db.com/exploits/14944		exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/archive/1/511121/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/39836		vdb-entryx_refsource_BIDPatch
http://www.securitytracker.com/id?1023938		vdb-entryx_refsource_SECTRACK
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-1701		Advisory