CVEvulnerability
CVE-2011-1972
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-08-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "pStream Release RCE Vulnerability."
Affected configurations
• microsoft visio 2003
• microsoft visio 2007
• microsoft visio 2010
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.us-cert.gov/cas/techalerts/TA11-221A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-060 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12852 oval.cisecurity.org
- http://www.us-cert.gov/cas/techalerts/TA11-221A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-060 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12852 oval.cisecurity.org