CVE-2012-0136

CWE-94 — Code Injection3 documents3 sources
Severity
9.3CRITICAL
EPSS
45.1%
top 2.40%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Visio Viewer
Timeline
PublishedFeb 14
Latest updateMay 4

Description

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0137, and CVE-2012-0138.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-rcch-qf9h-vxg3: Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitra↗2022-05-04
▶
CVEList
CVE-2012-0136: Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitra↗2012-02-14
▶
CVE-2012-0136 (CRITICAL CVSS 9.3) | Microsoft Visio Viewer 2010 Gold an | cvebase.io