Unrated severityNVD Advisory· Published Feb 10, 2009· Updated Apr 23, 2026

CVE-2009-0096

Description

Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly perform memory copy operations for object data, which allows remote attackers to execute arbitrary code via a crafted Visio document, aka "Memory Corruption Vulnerability."

Affected products

Microsoft/Visio3 versions
cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:visio:2003:sp3:*:*:*:*:*:*
- cpe:2.3:a:microsoft:visio:2007:sp1:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.us-cert.gov/cas/techalerts/TA09-041A.htmlnvdUS Government Resource
www.vupen.com/english/advisories/2009/0391nvd
docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-005nvd
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6172nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.051
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000