Gravité: : Élevé
  Identifiant(s) CVE: : CVE-2010-3148
  Date du conseil: 14 juillet 2011

  Description

This bulletin addresses a publicly disclosed vulnerability in Microsoft Visio, which could lead to arbitrary code execution if a remote user opens a legitimate Visio file located in the same network as a malicious library file. If successfully exploited, this may lead to remote user gaining same user rights as the logged-on user.

  Information Exposure Rating:

For information on patches specific to the affected software, please proceed to the Microsoft Web page.

  Solutions

  Trend Micro Deep Security DPI Rule Number: 1004730
  Trend Micro Deep Security DPI Rule Name: Microsoft Visio Insecure Library Loading Vulnerability Over Network Share

  Affected software and version:

  • Microsoft Visio 2003 Service Pack 3