CVE-2008-1090: Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-ass...

Security readout for executives and security teams

CVE-2008-1090 is a Microsoft Visio flaw where opening a malicious .DXF file could let an attacker run code as the user. It requires user interaction, but successful exploitation could compromise the workstation. The available bundle does not show active exploitation or KEV listing. Exposure is most likely on legacy desktops or terminal servers still running affected Microsoft Visio versions and able to open .DXF files from email, web downloads, file shares, or external partners. Prioritize remediation where old Visio versions remain in business workflows. The issue is legacy, but arbitrary code execution from a document file can still create endpoint compromise risk if obsolete software is present. Mitigation focus: Review Microsoft MS08-019 and apply the relevant Visio security update.; Retire or upgrade affected Visio 2002, 2003, and 2007 installations.; Restrict opening .DXF files from untrusted sources until remediation is confirmed..

Prepared

Jun 28, 2026, 19:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.