CVE-2009-0096: Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly perform memory copy operations fo...

Security readout for executives and security teams

This is an old Microsoft Visio memory corruption issue. If a user opens a malicious Visio document in affected versions, an attacker could run code on that user's system. Business urgency is highest where legacy Visio remains installed or documents from untrusted sources are routinely handled. Exposure is likely limited to environments still running Microsoft Office Visio 2002 SP2, Visio 2003 SP3, or Visio 2007 SP1, especially on workstations that open external Visio files. Modern or fully patched environments may not be affected, but the provided bundle does not list replacement versions. Prioritize remediation if legacy Visio is present, because successful exploitation could compromise a user workstation. If affected versions are absent, urgency is lower, but confirm through asset and patch data rather than assuming retirement of old Office software. Mitigation focus: Apply Microsoft guidance and security updates from MS09-005 where applicable.; Inventory endpoints for Visio 2002 SP2, 2003 SP3, and 2007 SP1.; Upgrade or remove unsupported legacy Visio installations where business permits..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.