Intrusion PreventionMS.Visio.ObjectID.Memory.Corruption
Description
This indicates an attack attempt against a memory-corruption vulnerability in Microsoft Visio.
The vulnerability is due to an error when the vulnerable software parses an invalid object ID in an object header. An attacker may exploit this to execute arbitrary code, or cause a denial-of-service condition.
Affected Products
Microsoft Office Visio 2002 Service Pack 2
Microsoft Office Visio 2003 Service Pack 3
Microsoft Office Visio 2007 Service Pack 1
Microsoft Office Visio 2007 Service Pack 2
Impact
System compromise
Denial of service
Recommended Actions
Please refer to the vendor's advisory for patches or updates:
http://www.microsoft.com/technet/security/Bulletin/ms10-029.mspx
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2021-01-11 | 16.995 |
| ID | 17592 |
| Created | Sep 03, 2009 |
| Updated | Jan 08, 2021 |
| Risk |
|
| CVE ID | CVE-2010-0256 |
| Exploit Prediction Score | 42.31% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | MS_Office |