← Retour aux CVEs

CVE-2010-3333

HIGHCISA KEV

7.8

Description

Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via crafted RTF data, aka "RTF Stack Buffer Overflow Vulnerability."

Details CVE

Score CVSS v3.17.8

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vecteur d'attaqueLOCAL

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurREQUIRED

Publie11/10/2010

Derniere modification4/22/2026

Sourcekev

Observations honeypot0

CISA KEV

FournisseurMicrosoft

ProduitOffice

Nom vulnerabiliteMicrosoft Office Stack-based Buffer Overflow Vulnerability

Date ajout KEV2022-03-03

Date limite remediation2022-03-24

Utilise dans ransomwareUnknown

Produits affectes

microsoft:officemicrosoft:open_xml_file_format_converter

Faiblesses (CWE)

CWE-787CWE-787

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=880(secure@microsoft.com)

http://secunia.com/advisories/38521(secure@microsoft.com)

http://secunia.com/advisories/42144(secure@microsoft.com)

http://securityreason.com/securityalert/8293(secure@microsoft.com)

http://www.securityfocus.com/bid/44652(secure@microsoft.com)

http://www.securitytracker.com/id?1024705(secure@microsoft.com)

http://www.us-cert.gov/cas/techalerts/TA10-313A.html(secure@microsoft.com)

http://www.vupen.com/english/advisories/2010/2923(secure@microsoft.com)

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087(secure@microsoft.com)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11931(secure@microsoft.com)

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=880(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/38521(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/42144(af854a3a-2127-422b-91ae-364da2661108)

http://securityreason.com/securityalert/8293(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/44652(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id?1024705(af854a3a-2127-422b-91ae-364da2661108)

http://www.us-cert.gov/cas/techalerts/TA10-313A.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2010/2923(af854a3a-2127-422b-91ae-364da2661108)

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11931(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3333(134c704f-9b21-4f2e-91b3-4a467353bcc0)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.