Signature Detail

HTTP: Microsoft Visio Object Header Buffer Overflow

This signature detects attempts to exploit a known vulnerability in Microsoft Visio. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the user.

Extended Description

Microsoft Visio is prone to a remote code-execution vulnerability because it fails to adequately handle user-supplied data. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Failed exploit attempts will result in a denial-of-service condition.

Affected Products

• Microsoft visio_2002 SP2
• Microsoft visio_2003 SP2
• Microsoft visio_2003 SP3
• Microsoft visio_2007 SP1
• Microsoft visio_2007

References

• BugTraq: 28555
• CVE: CVE-2008-1089