CVEvulnerability
CVE-2009-0096
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-02-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly perform memory copy operations for object data, which allows remote attackers to execute arbitrary code via a crafted Visio document, aka "Memory Corruption Vulnerability."
Affected configurations
• microsoft visio 2002
• microsoft visio 2003
• microsoft visio 2007
Related
Weakness · not in database (1)
References
- http://www.us-cert.gov/cas/techalerts/TA09-041A.html US Government Resource
- http://www.vupen.com/english/advisories/2009/0391 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-005 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6172 oval.cisecurity.org
- http://www.us-cert.gov/cas/techalerts/TA09-041A.html US Government Resource
- http://www.vupen.com/english/advisories/2009/0391 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-005 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6172 oval.cisecurity.org