Microsoft Office Visio Remote Code Execution Vulnerability

The Microsoft Visio Products are missing a security update. It is, therefore, affected by the following vulnerabilities:

  - Multiple code execution vulnerabilities. An attacker can exploit these to bypass authentication and     execute unauthorized arbitrary commands. (CVE-2022-24461, CVE-2022-24509, CVE-2022-24510)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities:

  - Multiple code execution vulnerabilities. An attacker can exploit these to bypass authentication and     execute unauthorized arbitrary commands. (CVE-2022-24461, CVE-2022-24509, CVE-2022-24510)

  - A security feature bypass vulnerability. (CVE-2022-24462)

  - A tampering vulnerability. (CVE-2022-24511)

This plugin has been deprecated to be brought in line with Tenable's C2R plugin policy. Pleas use smb_nt_ms22_mar_visio_c2r.nasl instead.

This plugin has been deprecated to be brought in line with Tenable's C2R plugin policy. Pleas use smb_nt_ms22_mar_office_c2r.nasl instead.

ID	Name	Product	Family	Severity
162112	Security Updates for Microsoft Visio Products C2R (March 2022)	Nessus	Windows	high
162060	Security Updates for Microsoft Office Products C2R (March 2022)	Nessus	Windows	high
158927	Security Updates for Microsoft Visio Products (March 2022) (deprecated)	Nessus	Windows : Microsoft Bulletins	high
158818	Security Updates for Microsoft Office Products (March 2022) (deprecated)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2022-24509

high

Tenable Plugins

high

high

high

high