MS.Office.Visio.DXF.File.Stack.Buffer.Overflow

Release Date Oct 05, 2010
Severity high
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt against a buffer-overflow vulnerability in Microsoft Office Visio. The vulnerability is caused by an error when the vulnerable software handles specially crafted DXF files inserted into Visio documents. It allows a remote attacker to execute arbitrary code.
Affected Products Microsoft Visio 2007 SP1 Microsoft Visio 2003 SP3 Microsoft Visio 2002 SP2 Microsoft Visio 2007 SP2
Recommended Actions Apply the patch supplied by the vendor: http://www.microsoft.com/technet/security/Bulletin/MS10-028.mspx
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2010-1681
Reference/s http://www.securityfocus.com/bid/39836 (BugTraq) http://www.exploit-db.com/exploits/14944/

Fortinet