Microsoft Visio是一款微软开发的流程图软件。解析某些结构时elements.dll存在错误,攻击者构建特制的Visio文件,诱使用户访问,可以应用程序上下文执行任意代码。
用户可参考如下供应商提供的安全补丁修复此漏洞:Microsoft Visio 2002 Professional SP2Microsoft Visio2002-KB2434711-FullFile-ENU.EXEhttp://www.microsoft.com/downloads/details.aspx?familyid=273d8078-0dc7 -43d8-bcae-54c811e49e0eMicrosoft Visio 2002 SP2Microsoft Visio2002-KB2434711-FullFile-ENU.EXEhttp://www.microsoft.com/downloads/details.aspx?familyid=273d8078-0dc7 -43d8-bcae-54c811e49e0eMicrosoft Visio 2002 Standard SP2Microsoft Visio2002-KB2434711-FullFile-ENU.EXEhttp://www.microsoft.com/downloads/details.aspx?familyid=273d8078-0dc7 -43d8-bcae-54c811e49e0eMicrosoft Visio 2003 SP3Microsoft visio2003-KB2434733-FullFile-ENU.exehttp://www.microsoft.com/downloads/details.aspx?familyid=f1067eaa-d18d -4bff-a02e-1d990c36ca7fMicrosoft Visio 2007 SP2Microsoft visio2007-kb2434737-fullfile-x86-glb.exehttp://www.microsoft.com/downloads/details.aspx?familyid=097a642b-b786 -4724-a907-79f37cded836