CVE-2010-2569

{"id": "CVE-2010-2569", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2010-12-16T19:33:01.880", "references": [{"url": "http://www.securitytracker.com/id?1024885", "source": "secure@microsoft.com"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA10-348A.html", "tags": ["US Government Resource"], "source": "secure@microsoft.com"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-103", "source": "secure@microsoft.com"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11555", "source": "secure@microsoft.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, and 2007 SP2 does not properly handle an unspecified size field in certain older file formats, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted Publisher file, aka \"Size Value Heap Corruption in pubconv.dll Vulnerability.\""}, {"lang": "es", "value": "pubconv.dll (tambi\u00e9n conocido como el Publisher Converter DLL) en Microsoft Publisher 2002 SP3, 2003 SP3, y 2007 SP2, no maneja adecuadamente un tama\u00f1o de campo sin especificar en determinados formatos antiguos de archivos, lo que permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n o provocar una denegaci\u00f3n de servicio (corrupci\u00f3n de memoria din\u00e1mica) a trav\u00e9s de una archivo de Publisher manipulado. Tambi\u00e9n conocida como \"Size Value Heap Corruption in pubconv.dll Vulnerability\"."}], "lastModified": "2018-10-12T21:57:59.077", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:publisher:2002:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "71EF6E23-253B-4662-8599-11A518E6F426"}, {"criteria": "cpe:2.3:a:microsoft:publisher:2003:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C339302C-2A13-4869-A46A-AC43F5696D20"}, {"criteria": "cpe:2.3:a:microsoft:publisher:2007:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A885981E-709E-4272-8DC6-A8FED3B71BCF"}], "operator": "OR"}]}], "sourceIdentifier": "secure@microsoft.com"}