GCVE - cpe:2.3:a:microsoft:visio:2003:sp3:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:visio:2003:sp3:*:*:*:*:*:*

part: a version: 2003 update: sp3

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Visio (`06ecccd5-6df5-51f5-add2-c761fcdf3ea8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-1301`	vulnerable	2026-06-08 05:03:53.336331	Details available Microsoft Visio 2003 SP3 2007 SP3, and 2010 SP1 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, aka "XML External Entities Resolution Vulnerability." Published: 2013-05-15T01:00:00.000Z Updated: 2024-08-06T14:57:05.039Z Open on db.gcve.eu Reference links http://www.us-cert.gov/ncas/alerts/TA13-134A https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16750 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-044	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1979`	vulnerable	2026-06-08 04:58:03.382167	Details available Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "Move Around the Block RCE Vulnerability." Published: 2011-08-10T21:16:00.000Z Updated: 2024-08-06T22:46:00.924Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12659 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-060 http://www.us-cert.gov/cas/techalerts/TA11-221A.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1972`	vulnerable	2026-06-08 04:58:03.368446	Details available Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "pStream Release RCE Vulnerability." Published: 2011-08-10T21:16:00.000Z Updated: 2024-08-06T22:46:00.807Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-060 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12852 http://www.us-cert.gov/cas/techalerts/TA11-221A.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0093`	vulnerable	2026-06-08 04:56:35.191102	Details available ELEMENTS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 does not properly parse structures during the opening of a Visio file, which allows remote attackers to execute arbitrary code via a file containing a malformed structure, aka "Visio Data Type Memory Corruption Vulnerability." Published: 2011-02-10T15:00:00.000Z Updated: 2024-08-06T21:43:14.316Z Open on db.gcve.eu Reference links http://osvdb.org/70829 http://www.vupen.com/english/advisories/2011/0321 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-008 https://exchange.xforce.ibmcloud.com/vulnerabilities/64924 http://www.securitytracker.com/id?1025043	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0092`	vulnerable	2026-06-08 04:56:35.190007	Details available The LZW stream decompression functionality in ORMELEMS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 allows remote attackers to execute arbitrary code via a Visio file with a malformed VisioDocument stream that triggers an exception handler that accesses an object that has not been fully initialized, which triggers memory corruption, aka "Visio Object Memory Corruption Vulnerability." Published: 2011-02-10T15:00:00.000Z Updated: 2024-08-06T21:43:14.586Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/64923 http://www.vupen.com/english/advisories/2011/0321 http://www.securityfocus.com/archive/1/516274/100/0/threaded https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-008 http://www.securityfocus.com/bid/46137	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1681`	vulnerable	2026-06-08 04:54:09.939950	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0256`	vulnerable	2026-06-08 04:52:01.274602	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0254`	vulnerable	2026-06-08 04:52:01.265094	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0097`	vulnerable	2026-06-08 04:51:07.641341	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0096`	vulnerable	2026-06-08 04:51:07.640958	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0095`	vulnerable	2026-06-08 04:51:07.639910	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.