CVE-2012-0020 — Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0136, CVE-2012-0137, and CVE-2012-0138

Back Back to CVE browser

HIGH

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0136, CVE-2012-0137, and CVE-2012-0138

Published Feb 14, 2012

9.3

HIGH

CVSS 2.0

EPSS 20.01%

Description

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0136, CVE-2012-0137, and CVE-2012-0138.

Affected products

Remediation

No remediation recorded yet.

Metrics

20.01% 0.20013

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.20013

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (18 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	20.01% (0.20013)	97.37th	v5 (v2026.06.15)
Jun 15, 2026	20.37% (0.20373)	97.15th	v5 (v2026.06.15)
Jan 5, 2026	45.10% (0.45098)	97.47th	v4 (v2025.03.14)
Mar 30, 2025	41.98% (0.41982)	97.16th	v4 (v2025.03.14)
Mar 29, 2025	51.20% (0.51195)	96.89th	v4 (v2025.03.14)
Mar 19, 2025	41.98% (0.41982)	97.03th	v4 (v2025.03.14)
Mar 17, 2025	45.20% (0.45198)	97.30th	v4 (v2025.03.14)
Mar 2, 2025	48.73% (0.48732)	97.67th	v3 (v2023.03.01)
Dec 17, 2024	51.77% (0.51774)	97.67th	v3 (v2023.03.01)
Nov 23, 2024	67.70% (0.67702)	98.07th	v3 (v2023.03.01)
Jun 22, 2024	70.59% (0.70593)	98.06th	v3 (v2023.03.01)
Apr 28, 2024	63.28% (0.63284)	97.81th	v3 (v2023.03.01)
Nov 13, 2023	56.13% (0.56125)	97.33th	v3 (v2023.03.01)
Sep 14, 2023	46.90% (0.46902)	96.98th	v3 (v2023.03.01)
Mar 10, 2023	48.59% (0.48588)	96.87th	v3 (v2023.03.01)
Mar 7, 2023	40.84% (0.40840)	96.64th	v3 (v2023.03.01)
Mar 6, 2023	49.72% (0.49719)	98.71th	v2 (v2022.01.01)
Feb 4, 2022	49.72% (0.49719)	98.28th	v2 (v2022.01.01)

Weaknesses (1)

CWE-94

Code Injection

References (3)

http://www.us-cert.gov/cas/techalerts/TA12-045A.html
third-party-advisoryx_refsource_CERTThird Party AdvisoryUS Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-015
vendor-advisoryx_refsource_MS
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14965
vdb-entrysignaturex_refsource_OVAL

Link	Providers	Tags
http://www.us-cert.gov/cas/techalerts/TA12-045A.html		third-party-advisoryx_refsource_CERTThird Party AdvisoryUS Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-015		vendor-advisoryx_refsource_MS
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14965		vdb-entrysignaturex_refsource_OVAL

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Feb 14, 2012

Updated Aug 6, 2024

Reserved Nov 9, 2011

Link CVE-2012-0020

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2012-0020

Red Hat

Severity n/a

Public date n/a

Links CVE-2012-0020