GCVE - cpe:2.3:a:microsoft:visio:2007:sp2:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:visio:2007:sp2:*:*:*:*:*:*

part: a version: 2007 update: sp2

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Visio (`06ecccd5-6df5-51f5-add2-c761fcdf3ea8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-1979`	vulnerable	2026-06-08 04:58:03.382188	Details available Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "Move Around the Block RCE Vulnerability." Published: 2011-08-10T21:16:00.000Z Updated: 2024-08-06T22:46:00.924Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12659 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-060 http://www.us-cert.gov/cas/techalerts/TA11-221A.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1972`	vulnerable	2026-06-08 04:58:03.369182	Details available Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "pStream Release RCE Vulnerability." Published: 2011-08-10T21:16:00.000Z Updated: 2024-08-06T22:46:00.807Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-060 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12852 http://www.us-cert.gov/cas/techalerts/TA11-221A.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0093`	vulnerable	2026-06-08 04:56:35.191122	Details available ELEMENTS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 does not properly parse structures during the opening of a Visio file, which allows remote attackers to execute arbitrary code via a file containing a malformed structure, aka "Visio Data Type Memory Corruption Vulnerability." Published: 2011-02-10T15:00:00.000Z Updated: 2024-08-06T21:43:14.316Z Open on db.gcve.eu Reference links http://osvdb.org/70829 http://www.vupen.com/english/advisories/2011/0321 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-008 https://exchange.xforce.ibmcloud.com/vulnerabilities/64924 http://www.securitytracker.com/id?1025043	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-0092`	vulnerable	2026-06-08 04:56:35.190614	Details available The LZW stream decompression functionality in ORMELEMS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 allows remote attackers to execute arbitrary code via a Visio file with a malformed VisioDocument stream that triggers an exception handler that accesses an object that has not been fully initialized, which triggers memory corruption, aka "Visio Object Memory Corruption Vulnerability." Published: 2011-02-10T15:00:00.000Z Updated: 2024-08-06T21:43:14.586Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/64923 http://www.vupen.com/english/advisories/2011/0321 http://www.securityfocus.com/archive/1/516274/100/0/threaded https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-008 http://www.securityfocus.com/bid/46137	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1681`	vulnerable	2026-06-08 04:54:09.939995	Details available Buffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted remote attackers to execute arbitrary code via a crafted DXF file, a different vulnerability than CVE-2010-0254 and CVE-2010-0256. Published: 2010-05-05T18:00:00.000Z Updated: 2024-08-07T01:35:52.923Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1023938 http://www.securityfocus.com/bid/39836 http://www.exploit-db.com/exploits/14944 http://www.securityfocus.com/archive/1/511121/100/0/threaded http://www.coresecurity.com/content/ms-visio-dxf-buffer-overflow	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0256`	vulnerable	2026-06-08 04:52:01.274641	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0254`	vulnerable	2026-06-08 04:52:01.266174	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.