Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly validate object data in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Memory Validation Vulnerability."

More... (http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-0095)