Executive Summary
| Summary | |
|---|---|
| Title | Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (980094) |
| Informations | |||
|---|---|---|---|
| Name | MS10-028 | First vendor Publication | 2010-04-13 |
| Vendor | Microsoft | Last vendor Modification | 2010-04-13 |
| Severity (Vendor) | Important | Revision | 1.0 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:H/Au:N/C:C/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 7.6 | Attack Range | Network |
| Cvss Impact Score | 10 | Attack Complexity | High |
| Cvss Expoit Score | 4.9 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Revision Note: V1.0 (April 13, 2010): Bulletin published.Summary: This security update resolves two privately reported vulnerabilities in Microsoft Office Visio. The vulnerabilities could allow remote code execution if a user opens a specially crafted Visio file. An attacker who successfully exploited these vulnerabilities could gain the same user rights as the local user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. |
Original Source
| Url : http://www.microsoft.com/technet/security/bulletin/MS10-028.mspx |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-94 | Failure to Control Generation of Code ('Code Injection') |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:6732 | |||
| Oval ID: | oval:org.mitre.oval:def:6732 | ||
| Title: | Visio Index Calculation Memory Corruption Vulnerability | ||
| Description: | Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly calculate unspecified indexes associated with Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Visio Index Calculation Memory Corruption Vulnerability." | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2010-0256 | Version: | 5 |
| Platform(s): | Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 | Product(s): | Microsoft Office Visio 2002 Microsoft Office Visio 2003 Microsoft Office Visio 2007 |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:6819 | |||
| Oval ID: | oval:org.mitre.oval:def:6819 | ||
| Title: | Visio Attribute Validation Memory Corruption Vulnerability | ||
| Description: | Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Visio Attribute Validation Memory Corruption Vulnerability." | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2010-0254 | Version: | 5 |
| Platform(s): | Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 | Product(s): | Microsoft Office Visio 2002 Microsoft Office Visio 2003 Microsoft Office Visio 2007 |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 4 |
ExploitDB Exploits
| id | Description |
|---|---|
| 2011-06-26 | Microsoft Office Visio VISIODWG.DLL DXF File Handling Vulnerability |
OpenVAS Exploits
| Date | Description |
|---|---|
| 2010-04-14 | Name : Microsoft Visio Remote Code Execution Vulnerabilities (980094) File : nvt/secpod_ms10-028.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 63742 | Microsoft Office Visio Unspecified Index Calculation Memory Corruption |
| 63741 | Microsoft Office Visio Unspecified Attribute Validation Memory Corruption |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2014-01-10 | Microsoft Office Visio off-by-one in array index code execution attempt RuleID : 16536 - Revision : 13 - Type : FILE-OFFICE |
| 2014-01-10 | Microsoft Office Visio improper attribute code execution attempt RuleID : 16535 - Revision : 13 - Type : FILE-OFFICE |
Metasploit Database
| id | Description |
|---|---|
| 2010-05-04 | Microsoft Office Visio VISIODWG.DLL DXF File Handling Vulnerability |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2010-04-13 | Name : Arbitrary code can be executed on the remote Windows host through Visio. File : smb_nt_ms10-028.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2020-05-23 13:17:13 |
|
| 2014-02-17 11:46:32 |
|
| 2014-01-19 21:30:28 |
|
| 2013-09-05 21:20:21 |
|
