CVE-2008-1089 Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a Visio file containing crafted object h...
HighCVSS 9.3
EPSS 32.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute arbitrary code via a Visio file containing crafted object header data, aka "Visio Object Header Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office | = 2003-sp2 | No fix listed |
| Microsoft office | = 2003-sp3 | No fix listed |
| Microsoft office | = 2007 | No fix listed |
| Microsoft office | = 2007_sp1 | No fix listed |
| Microsoft office | = xp-sp2 | No fix listed |
| Microsoft visio | = 2002-sp2 | No fix listed |
| Microsoft visio | = 2003-sp1 | No fix listed |
| Microsoft visio | = 2003_sp3 | No fix listed |
| Microsoft visio | = 2007 | No fix listed |
| Microsoft visio | = 2007_sp1 | No fix listed |
References
- SSRT080048 vendor-advisory
- 29691 third-party-advisory vendor-advisory
- 28555 patch vdb-entry
- 1019804 vdb-entry
- TA08-099A third-party-advisory us-government-resource
- ADV-2008-1143 vdb-entry
- MS08-019 vendor-advisory
- visio-object-header-code-execution(41451) vdb-entry
- oval:org.mitre.oval:def:5496 signature vdb-entry