Microsoft Office Visio VISIODWG.DLL DXF File Handling Vulnerability

This module exploits a stack based overflow vulnerability in the handling of the DXF files by Microsoft Visio 2002. Revisions prior to the release of the MS bulletin MS10-028 are vulnerable. The overflow occurs when the application is used to import a specially crafted DXF file, while parsing the HEADER section of the DXF file. To trigger the vulnerability an attacker must convince someone to insert a specially crafted DXF file to a new document, go to 'Insert' -> 'CAD Drawing'

Search Other Modules

Exploit Rank

• Good

Exploit Authors

• CORE Security < >
• Shahin Ramezany < shahin [at] abysssec.com >
• juan vazquez < >

Vulnerability References

• CVE-2010-1681
• OSVDB-64446
• BID-39836
• http://www.coresecurity.com/content/ms-visio-dxf-buffer-overflow
• http://www.exploit-db.com/moaub-8-microsoft-office-visio-dxf-file-stack-overf...

Exploit Targets

• 0 - Visio 2002 English on Windows XP SP3 Spanish
• 1 - Visio 2002 English on Windows XP SP3 English

Exploit Development

• Source Code
• History

Similar Exploit Modules

• exploit/windows/fileformat/a-pdf_wav_to_mp3
• exploit/windows/fileformat/acdsee_fotoslate_string
• exploit/windows/fileformat/acdsee_xpm
• exploit/windows/fileformat/activepdf_webgrabber
• exploit/windows/fileformat/adobe_collectemailinfo
• exploit/windows/fileformat/adobe_cooltype_sing
• exploit/windows/fileformat/adobe_flashplayer_button
• exploit/windows/fileformat/adobe_flashplayer_newfunction
• exploit/windows/fileformat/adobe_flatedecode_predictor02
• exploit/windows/fileformat/adobe_geticon

Exploit Usage Information

Exploit Module Options