Intrusion PreventionMS.Visio.Attribute.Memory.Corruption
Description
This indicates an attack attempt against a memory-corruption vulnerability in Microsoft Visio.
The vulnerability is caused by an error when the vulnerable software parses an invalid attributes field in an object header. An attacker may exploit this to execute arbitrary code, or cause a denial-of-service condition.
Affected Products
Microsoft Office Visio 2002 Service Pack 2
Microsoft Office Visio 2003 Service Pack 3
Microsoft Office Visio 2007 Service Pack 1
Microsoft Office Visio 2007 Service Pack 2
Impact
System compromise
Denial of service
Recommended Actions
Please refer to the vendor's advisory for patches or updates:
http://www.microsoft.com/technet/security/Bulletin/ms10-029.mspx
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 17597 |
| Created | Sep 03, 2009 |
| Updated | Jan 13, 2022 |
| Risk |
|
| CVE ID | CVE-2010-0254 |
| Exploit Prediction Score | 42.22% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | MS_Office |