Unscored severity · published Feb 14, 2012
CVE-2012-0137
Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted…
–
CVSS
19.9%
EPSS
No
On KEV
Description
Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0136, and CVE-2012-0138.
Exploitation
Is it being used?
Exploit prediction (EPSS)19.9% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VV
Visio Viewer · Microsoft
2010; 2010 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-0137
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-0137
Third Party Advisory
http://www.us-cert.gov/cas/techalerts/TA12-045A.html
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-015
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14602
More from Visio Viewer
7.8
CVE-2016-3235
Microsoft Office OLE DLL Side Loading Vulnerability
–
CVE-2013-0079
Microsoft Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file that triggers incorrect memory allocation, aka "Visio Viewer Tree Object…
–
CVE-2012-1888
Buffer overflow in Microsoft Visio 2010 SP1 and Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file, aka "Visio DXF File Format Buffer…
–
CVE-2012-0018
Microsoft Visio Viewer 2010 Gold and SP1 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "VSD…
–
CVE-2012-0138
Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted…