CVE-2007-0936: Microsoft Office

High severity, CVSS 9.3. EPSS: 30.9% chance of exploitation in the next 30 days.

Multiple unspecified vulnerabilities in Microsoft Visio 2002 allow remote user-assisted attackers to execute arbitrary code via a Visio (.VSD, VSS, .VST) file with a crafted packed object that triggers memory corruption, aka "Visio Document Packaging Vulnerability."

Affected products

• Microsoft Office: version 2003 only
• Microsoft Visio: version 2002 only

Published 2007-06-12. Last modified 2026-06-16.