CVE-2010-3148: Untrusted search path vulnerability in Microsoft Visio 2003 SP3 allows local users to gain privileges via a...

Security readout for executives and security teams

This is an old Microsoft Visio 2003 SP3 insecure library loading flaw. If Visio opens a file from a folder containing a malicious DLL named mfc71enu.dll, attacker code may run with the user’s privileges. The issue mainly matters where legacy Visio remains installed and users open diagrams from shared or untrusted folders. Exposure is most plausible on endpoints still running Microsoft Visio 2003 SP3. Risk is higher where users open Visio files from network shares, downloads, removable media, or externally supplied project folders. The provided affected-products metadata is incomplete, so inventory confirmation is necessary. Prioritize this if legacy Visio is still present in business workflows. It is not marked as actively exploited in the supplied data, but the age, public exploit reference, and unsupported-software likelihood make it a legacy risk that should be eliminated during endpoint hygiene work. Mitigation focus: Apply Microsoft guidance from MS11-055 where Visio 2003 SP3 is still present.; Remove or isolate unsupported legacy Visio installations if patch status cannot be verified.; Restrict opening Visio files from untrusted folders, shares, archives, and removable media..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.