PT-2024-6728 · Microsoft · Office Visio

Luke Papandrea · Published 2024-10-08 · Updated 2024-10-17 · CVE-2024-43505

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Microsoft Office Visio (affected versions not specified)

Description: The issue is related to a lack of warning about dangerous actions in the Microsoft Office Visio graphic editor, which is part of Microsoft Office and Microsoft 365 Apps for Enterprise packages. Exploitation of this issue may allow an attacker to execute arbitrary code.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-357

Related Identifiers

BDU:2024-07941

CVE-2024-43505

Affected Products

Office Visio

References · 6

• https://bdu.fstec.ru/vul/2024-07941 · Security Note
• https://osv.dev/vulnerability/CVE-2024-43505 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43505 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-43505 · Security Note
• https://twitter.com/windowsforum/status/1843752128830980368 · Twitter Post
• https://t.me/cvenotify/98611 · Telegram Post