Oval Definition:
oval:org.mitre.oval:def:6188
Revision Date
:
2013-02-11
Version
:
4
Title
:
Memory Corruption Vulnerability
Description
:
Microsoft Office Visio 2002 SP2 and 2003 SP3 does not properly validate memory allocation for Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Memory Corruption Vulnerability."
Family
:
windows
Class
:
vulnerability
Status
:
ACCEPTED
Reference(s)
:
CVE-2009-0097
Platform(s)
:
Microsoft Windows 2000
Microsoft Windows Server 2003
Microsoft Windows Vista
Microsoft Windows XP
Product(s)
:
Microsoft Office Visio 2002
Microsoft Office Visio 2003
Microsoft Office Visio 2007
Definition Synopsis
AND
Microsoft Office Visio 2002 SP2 is installed
AND
Vislib.dll version is less than 10.0.6885.4
OR
Microsoft Office Visio 2003 is installed
AND
Vislib.dll version is less than 11.0.8223.0
BACK