Buffer overflow in Microsoft Visio
CVE-2010-1681
Buffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted remote attackers to execute arbitrary code via a crafted DXF file, a different vulnerability than CVE-2010-0254 and CVE-2010-0256.
Vulnerability class: Buffer Overflow
EPSS: 0.791 (99.1th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Visio — versions 2007, 2003, 2002
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- 1023938 (vdb-entry, x_refsource_SECTRACK)
- 39836 (Patch, vdb-entry, x_refsource_BID)
- 14944 (exploit, x_refsource_EXPLOIT-DB)
- 20100504 [CORE-2010-0428] Microsoft Office Visio DXF File Insertion Buffer Overflow (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_MISC)
Frequently asked questions
- What is CVE-2010-1681?
- CVE-2010-1681 is a vulnerability in Microsoft Visio, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2010-05-06.
- Is CVE-2010-1681 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.