MS.Visio.Compressed.Document.Packaged.Object.Code.Execution

Release Date Nov 09, 2011
Severity critical
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates a possible attempt to exploit a Memory Corruption vulnerability in Microsoft Visio. The vulnerability is caused by a memory corruption error when parsing malformed packed objects in the Visio file format. An attacker may be able to use a specially crafted object to execute arbitrary code on a vulnerable system.
Affected Products Microsoft Visio 2002 Service Pack 2 Microsoft Visio 2003 Service Pack 2
Recommended Actions Apply fixes or patches, available from the website: http://technet.microsoft.com/en-us/security/bulletin/MS07-030
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2007-0936
Reference/s http://technet.microsoft.com/en-us/security/bulletin/MS07-030.mspx (MS-ID) http://www.securityfocus.com/bid/24384 (BugTraq)

Fortinet