CVE-2010-1681

Microsoft Visio - Buffer Overflow via Crafted DXF File

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 3 public exploits for CVE-2010-1681. PoCs published by Metasploit, Abysssec, Unknown, including Metasploit module exploits/windows/fileformat/visio_dxf_bof.

AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in Microsoft Office Visio 2002 by crafting a malicious DXF file. The exploit targets the VISIODWG.DLL component during the parsing of the HEADER section, leading to arbitrary code execution.

Description

Buffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted remote attackers to execute arbitrary code via a crafted DXF file, a different vulnerability than CVE-2010-0254 and CVE-2010-0256.

Exploits (3)

exploitdb WORKING POC VERIFIED
by Metasploit · rubylocalwindows
https://www.exploit-db.com/exploits/17451

This Metasploit module exploits a stack-based buffer overflow in Microsoft Office Visio 2002 by crafting a malicious DXF file. The exploit targets the VISIODWG.DLL component during the parsing of the HEADER section, leading to arbitrary code execution.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Microsoft Office Visio 2002 (VISIO.EXE v10.0.525.4, VISIODWG.DLL v10.0.525.4)
No auth needed
Prerequisites: Victim must open a specially crafted DXF file in Microsoft Visio 2002
devstral-2 · analyzed Feb 18, 2026 Full analysis →
exploitdb WORKING POC VERIFIED
by Abysssec · pythonlocalwindows
https://www.exploit-db.com/exploits/14944

This Python script generates a malicious DXF file that exploits a stack-based buffer overflow in Microsoft Office Visio 2002 (CVE-2010-1681). It crafts a payload with shellcode, a jump to ESP, and a controlled EIP overwrite to achieve remote code execution.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Microsoft Office Visio 2002 (xp)
No auth needed
Prerequisites: Victim must open the malicious DXF file in Visio 2002
devstral-2 · analyzed Feb 18, 2026 Full analysis →
metasploit WORKING POC GOOD
by Unknown · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/visio_dxf_bof.rb

This Metasploit module exploits a stack-based buffer overflow in Microsoft Office Visio 2002 by crafting a malicious DXF file. The exploit targets the VISIODWG.DLL component during the parsing of the HEADER section, leading to arbitrary code execution.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Microsoft Office Visio 2002 (VISIO.EXE v10.0.525.4, VISIODWG.DLL v10.0.525.4)
No auth needed
Prerequisites: Victim must open a specially crafted DXF file in Microsoft Visio 2002
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1023938
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/39836
Exploit, Third Party Advisory exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/14944
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/511121/100/0/threaded

Scores

EPSS 0.6731
EPSS Percentile 99.2%

Details

CWE
CWE-119
Status published
Products (3)
microsoft/visio 2002 sp2
microsoft/visio 2003 sp3
microsoft/visio 2007 sp1 (2 CPE variants)
Published May 06, 2010
Tracked Since Feb 18, 2026