VULNERABILITY INTELLIGENCE

CVE-2011-1972

CVSS score9.3 HIGH
EPSS probability22.20%
CISA KEVNot currently listed
Published2011-08-10
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka "pStream Release RCE Vulnerability."

Weakness classification

  • CWE-20: Improper Input Validation

Primary references