Unrated severityNVD Advisory· Published Feb 14, 2012· Updated Apr 29, 2026
CVE-2012-0138
CVE-2012-0138
Description
Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0136, and CVE-2012-0137.
Affected products
2cpe:2.3:a:microsoft:visio_viewer:2010:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:visio_viewer:2010:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:visio_viewer:2010:sp1:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.us-cert.gov/cas/techalerts/TA12-045A.htmlnvdThird Party AdvisoryUS Government Resource
- docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-015nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14811nvd
News mentions
0No linked articles in our index yet.