Intrusion PreventionMS.Visio.Object.Header.Handling.Code.Execution
Description
This indicates an attempt to exploit a memory-corruption vulnerability in Microsoft Visio.
The vulnerability is caused by an error in vislib.dll while processing malformed VST files. It allows remote attackers to crash the vulnerable software or execute arbitrary code via a crafted VST file.
Affected Products
Microsoft Office XP SP3
Microsoft Office 2003 SP2
Microsoft Office 2003 SP3
2007 Microsoft Office System
2007 Microsoft Office System SP1
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Refer to the vendor's web site for the suggested workaround:
http://www.microsoft.com/technet/security/Bulletin/ms08-019.mspx
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 15534 |
| Created | Jul 02, 2008 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2008-1089 |
| Exploit Prediction Score | 56.58% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | MS_Office |