Oval Definition:oval:org.mitre.oval:def:12659
Revision Date:2011-09-26Version:9
Title:Move Around the Block RCE Vulnerability
Description:Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "Move Around the Block RCE Vulnerability."
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2011-1979
Platform(s):Microsoft Windows 2000
Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Microsoft Office Visio 2003
Microsoft Office Visio 2007
Definition Synopsis
  • Microsoft Office Visio 2003
  • Microsoft Office Visio 2003 is installed
  • AND Check if the version of visio.exe is less than 11.0.8207.0
  • OR Microsoft Visio 2007
  • Microsoft Office Visio 2007 is installed
  • AND Check if the version of visio.exe is less than 12.0.6556.5000
  • BACK