Signature Detail

HTTP: Malformed Microsoft Office Visio File

This signature detects attempts to exploit a known vulnerability in the Microsoft Office Visio file format. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the client.

Extended Description

Microsoft Visio is prone to a remote code-execution vulnerability because it fails to adequately handle user-supplied data. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Failed exploit attempts will result in a denial-of-service condition.

Affected Products

• Microsoft Visio 2002 SP1
• Microsoft Visio 2002 SP2
• Microsoft Visio 2002
• Microsoft Visio 2002 Professional SP2
• Microsoft Visio 2002 Standard SP2
• Microsoft Visio 2003 SP1
• Microsoft Visio 2003 SP2
• Microsoft Visio 2003 SP3
• Microsoft Visio 2003
• Microsoft Visio 2003 Professional
• Microsoft Visio 2003 Standard
• Microsoft Visio 2007 SP1
• Microsoft Visio 2007

References

• CVE: CVE-2009-0097
• CVE: CVE-2009-0096