Xin Ouyang

The issue is related to incorrect access to objects in memory, which can cause a memory error and allow an attacker to execute arbitrary code in the context of the current user.

The issue is related to memory handling errors, allowing an attacker to execute arbitrary code or cause a denial of service using a specially crafted website. This is due to improper access to objects in memory in the context of the current user.

Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0136, and CVE-2012-0137.

A remote code execution issue exists due to improper parsing of structures when handling specially crafted Visio files. This allows attackers to execute arbitrary code via a file containing a malformed structure. An attacker who successfully exploits this issue could take complete control of an affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights. Users with fewer user rights on the system could be less affected than those operating with administrative user rights.

A buffer overflow issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long `MAIL FROM` command.