GCVE - cpe:2.3:a:microsoft:visio:2007:sp1:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:visio:2007:sp1:*:*:*:*:*:*

part: a version: 2007 update: sp1

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Visio (`06ecccd5-6df5-51f5-add2-c761fcdf3ea8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-1681`	vulnerable	2026-06-08 04:54:09.939973	Details available Buffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted remote attackers to execute arbitrary code via a crafted DXF file, a different vulnerability than CVE-2010-0254 and CVE-2010-0256. Published: 2010-05-05T18:00:00.000Z Updated: 2024-08-07T01:35:52.923Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1023938 http://www.securityfocus.com/bid/39836 http://www.exploit-db.com/exploits/14944 http://www.securityfocus.com/archive/1/511121/100/0/threaded http://www.coresecurity.com/content/ms-visio-dxf-buffer-overflow	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0256`	vulnerable	2026-06-08 04:52:01.274622	Details available Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly calculate unspecified indexes associated with Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Visio Index Calculation Memory Corruption Vulnerability." Published: 2010-04-14T15:44:00.000Z Updated: 2024-08-07T00:45:11.049Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6732 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-028 http://www.us-cert.gov/cas/techalerts/TA10-103A.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0254`	vulnerable	2026-06-08 04:52:01.265646	Details available Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Visio Attribute Validation Memory Corruption Vulnerability." Published: 2010-04-14T15:44:00.000Z Updated: 2024-08-07T00:45:11.567Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6819 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-028 http://www.us-cert.gov/cas/techalerts/TA10-103A.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0097`	vulnerable	2026-06-08 04:51:07.641359	Details available Microsoft Office Visio 2002 SP2 and 2003 SP3 does not properly validate memory allocation for Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Memory Corruption Vulnerability." Published: 2009-02-10T22:13:00.000Z Updated: 2024-08-07T04:24:18.074Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2009/0391 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-005 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6188 http://www.us-cert.gov/cas/techalerts/TA09-041A.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0096`	vulnerable	2026-06-08 04:51:07.640978	Details available Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly perform memory copy operations for object data, which allows remote attackers to execute arbitrary code via a crafted Visio document, aka "Memory Corruption Vulnerability." Published: 2009-02-10T22:13:00.000Z Updated: 2024-08-07T04:24:17.848Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2009/0391 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6172 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-005 http://www.us-cert.gov/cas/techalerts/TA09-041A.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0095`	vulnerable	2026-06-08 04:51:07.640496	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.