CVE-2008-1090 describes an unspecified memory validation vulnerability in Microsoft Visio 2002, 2003, and 2007. This critical vulnerability (CVSS 9.3) allows remote attackers to execute arbitrary code on a user's system through a specially crafted .DXF file, requiring user interaction to trigger. While no public exploit intelligence like Metasploit modules or ExploitDB entries are available, and there's no evidence of active exploitation or significant community discussion, its high CVSS score and FAUCET Risk Score of 98/100 indicate severe potential impact.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2003CPE matchmatch criteria | cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:* | ||
2003CPE matchmatch criteria | cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:* | ||
2007CPE matchmatch criteria | cpe:2.3:a:microsoft:office:2007:*:*:*:*:*:*:* | ||
2007_sp1CPE matchmatch criteria | cpe:2.3:a:microsoft:office:2007_sp1:*:*:*:*:*:*:* | ||
xpCPE matchmatch criteria | cpe:2.3:a:microsoft:office:xp:sp2:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:C/I:C/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.