Synopsis
Arbitrary code can be executed on the remote Windows host through Visio.
Description
The remote host contains a version of Microsoft Visio that is affected by multiple memory corruption vulnerabilities.
A remote attacker could exploit these by tricking a user into opening a specially crafted Visio file, resulting in arbitrary code execution.
Solution
Microsoft has released a set of patches for Visio 2002, 2003, and 2007.