Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The LZW stream decompression functionality in ORMELEMS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 allows remote attackers to execute arbitrary code via a Visio file with a malformed VisioDocument stream that triggers an exception handler that accesses an object that has not been fully initialized, which triggers memory corruption, aka "Visio Object Memory Corruption Vulnerability."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Visio对象内存破坏漏洞
Vulnerability Description
Microsoft Visio 是Office套件中用于绘制流程图的软件。 Microsoft Visio 2002 SP2,2003 SP3和2007 SP2版本的ORMELEMS.DLL中的LZW流解压功能中存在内存破坏漏洞。远程攻击者可借助带有畸形VisioDocument流的Visio文件执行任意代码并触发内存破坏, 该文件可触发异常处理器访问还未完全初始化的对象。
CVSS Information
N/A
Vulnerability Type
N/A