This host is missing a critical security update according to Microsoft Bulletin MS11-008.

Successful exploitation could allow users to execute arbitrary code via a specially crafted Visio file. Impact Level: System

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://www.microsoft.com/technet/security/bulletin/MS11-008.mspx

The flaws are due to: - A memory corruption error when handling certain objects while parsing malformed Visio files, which could be exploited by attackers to execute arbitrary code. - A memory corruption error when handling corrupted structures while parsing malformed Visio files, which could be exploited by attackers to execute arbitrary code.

Microsoft Visio 2002 Service Pack 2 and prior. Microsoft Visio 2003 Service Pack 3 and prior. Microsoft Visio 2007 Service Pack 2 and pripr.

• http://packetstormsecurity.org/files/cve/CVE-2011-0092
• http://packetstormsecurity.org/files/cve/CVE-2011-0093
• http://support.microsoft.com/kb/2434711
• http://support.microsoft.com/kb/2434733
• http://support.microsoft.com/kb/2434737
• http://www.microsoft.com/technet/security/bulletin/MS11-008.mspx
• http://www.vupen.com/english/advisories/2011/0321

---

Updated on 2015-03-25