CVE-2010-1681: Buffer overflow in VISIODWG.DLL before 10.0.6880.4 in Microsoft Office Visio allows user-assisted remote at...

Security readout for executives and security teams

CVE-2010-1681 is a Microsoft Office Visio file-handling flaw. A malicious DXF file can trigger a buffer overflow in VISIODWG.DLL and may let an attacker run code if a user opens or inserts the file. This is user-assisted, not a network worm scenario in the provided sources. Exposure is most likely on legacy systems with Microsoft Office Visio installed and VISIODWG.DLL older than 10.0.6880.4. Organizations without Visio, or with the relevant DLL at or above that version, are less likely to be affected based on the provided description. Treat this as a legacy high-risk desktop exposure. Prioritize environments where Visio remains installed, especially users receiving external engineering or drawing files. Business urgency is lower if Visio is absent or patched, but public exploit information raises concern for unmanaged legacy endpoints. Mitigation focus: Inventory Visio installations and VISIODWG.DLL versions across endpoints.; Use Microsoft guidance to update VISIODWG.DLL to 10.0.6880.4 or later.; Restrict untrusted DXF files from email, web downloads, and shared drives..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.