Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:STC:DL:VISIO-TYPE-CONF |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Microsoft Office Visio Tree Object Type Confusion |
Release Date |
2013/03/12 |
Update Number |
2243 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: Microsoft Office Visio Tree Object Type Confusion
This signature detects attempts to exploit a known vulnerability against Microsoft Visio Viewer. A successful attack can lead to arbitrary code execution.
Extended Description
Microsoft Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file that triggers incorrect memory allocation, aka "Visio Viewer Tree Object Type Confusion Vulnerability."
Affected Products
- Microsoft office_filter_pack 2010
- Microsoft visio 2010
- Microsoft visio_viewer 2010
References
- CVE: CVE-2013-0079