CVE-2015-2557

Microsoft Visio 2007 SP3 and 2010 SP2 - Remote Code Execution via Crafted UML Data

Title source: llm

Description

Buffer overflow in Microsoft Visio 2007 SP3 and 2010 SP2 allows remote attackers to execute arbitrary code via crafted UML data in an Office document, aka "Microsoft Office Memory Corruption Vulnerability."

References (3)

Core 3

Core References

Vendor Advisory vendor-advisory x_refsource_ms

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-110

Third Party Advisory, VDB Entry x_refsource_misc

http://www.zerodayinitiative.com/advisories/ZDI-15-519

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1033803

Scores

EPSS 0.2249

EPSS Percentile 97.4%

Details

CWE

CWE-119

Status published

Products (2)

microsoft/visio 2007 sp3

microsoft/visio 2010 sp2

Published Oct 14, 2015

Tracked Since Feb 18, 2026