CVE-2012-0018: microsoft visio_viewer Improper Input Validation

EPSS trend

Probability

25.07%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 25.07% on 20-09-2026

20-09-202620-10-2026

EPSS score

25.07%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

8 links

docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-031Vendor AdvisoryX Refsource MS
exchange.xforce.ibmcloud.com/vulnerabilities/75115VDB EntryX Refsource XF
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15606VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/49113Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/bid/53328VDB EntryX Refsource BID
www.securitytracker.com/id?1027042VDB EntryX Refsource SECTRACK
osvdb.org/81731VDB EntryX Refsource OSVDB
www.us-cert.gov/cas/techalerts/TA12-129A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource

Related vulnerabilities

CVE-2013-0079microsoftoffice_filter_pack+226.68%13y ago13-03-2013 00:00Microsoft Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file that triggers incorrect memory allocation, aka "Visio Viewer Tree Object Type Confusion Vulnerability."CVE-2016-3235microsoftvisio+1KEV43.31%10y ago16-06-2016 01:00Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Microsoft Office OLE DLL Side Loading Vulnerability."CVE-2012-1888microsoftvisio+124.15%14y ago15-08-2012 01:00Buffer overflow in Microsoft Visio 2010 SP1 and Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file, aka "Visio DXF File Format Buffer Overflow Vulnerability."CVE-2012-0019microsoftvisio_viewer20.01%14y ago14-02-2012 22:00Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0020, CVE-2012-0136, CVE-2012-0137, and CVE-2012-0138.CVE-2012-0137microsoftvisio_viewer19.85%14y ago14-02-2012 22:00Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0136, and CVE-2012-0138.CVE-2012-0138microsoftvisio_viewer19.85%14y ago14-02-2012 22:00Microsoft Visio Viewer 2010 Gold and SP1 does not properly handle memory during the parsing of files, which allows remote attackers to execute arbitrary code via crafted attributes in a Visio file, aka "VSD File Format Memory Corruption Vulnerability," a different vulnerability than CVE-2012-0019, CVE-2012-0020, CVE-2012-0136, and CVE-2012-0137.

All vulnerabilities invisio_viewer

CVE-2012-0018: microsoft visio_viewer Improper Input Validation

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References