CVE-2010-1681

CVE-2010-1681 is a buffer overflow vulnerability in VISIODWG.DLL affecting Microsoft Office Visio versions prior to 10.0.6880.4. An attacker can exploit this by convincing a user to open a specially crafted DXF file, leading to arbitrary code execution. This vulnerability is rated with a CVSS score of 7.6, indicating high severity due to its network-based attack vector, high impact on confidentiality, integrity, and availability, despite requiring user interaction. The EPSS score of 0.79 suggests a significant likelihood of exploitation. Exploit code is publicly available, including a Metasploit module and ExploitDB entries, though it is not listed on the CISA KEV catalog. There is minimal community discussion or media coverage surrounding this CVE.