CVE-2007-0936 : Multiple unspecified vulnerabilities in Microsoft Visio 2002 allow remote user-a

Multiple unspecified vulnerabilities in Microsoft Visio 2002 allow remote user-assisted attackers to execute arbitrary code via a Visio (.VSD, VSS, .VST) file with a crafted packed object that triggers memory corruption, aka "Visio Document Packaging Vulnerability."

Published 2007-06-12 19:30:00

Updated 2018-10-16 16:35:34

Source Microsoft Corporation

View at NVD, CVE.org

Vulnerability category: Memory CorruptionExecute code

Products affected by CVE-2007-0936

Microsoft » Office » Version: 2003
cpe:2.3:a:microsoft:office:2003:*:*:*:*:*:*:*
Matching versions
Microsoft » Visio » Version: 2002 Update SP2
cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2007-0936

EPSS FAQ

79.99%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 98 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-0936

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

References for CVE-2007-0936

Jump to

Vulnerability Details : CVE-2007-0936

Products affected by CVE-2007-0936

Exploit prediction scoring system (EPSS) score for CVE-2007-0936

CVSS scores for CVE-2007-0936

References for CVE-2007-0936