CVE-2010-3333

Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via crafted RTF data, aka "RTF Stack Buffer Overflow Vulnerability."

CVSS v3 7.8 HIGH
CVSS v2.0 9.3 HIGH

7.8^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

9.3^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=880	Broken Link
http://secunia.com/advisories/38521	Broken Link
http://secunia.com/advisories/42144	Broken Link
http://securityreason.com/securityalert/8293	Broken Link
http://www.securityfocus.com/bid/44652	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1024705	Broken Link Third Party Advisory VDB Entry
http://www.us-cert.gov/cas/techalerts/TA10-313A.html	Third Party Advisory US Government Resource
http://www.vupen.com/english/advisories/2010/2923	Broken Link
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087	Patch Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11931	Broken Link
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=880	Broken Link
http://secunia.com/advisories/38521	Broken Link
http://secunia.com/advisories/42144	Broken Link
http://securityreason.com/securityalert/8293	Broken Link
http://www.securityfocus.com/bid/44652	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1024705	Broken Link Third Party Advisory VDB Entry
http://www.us-cert.gov/cas/techalerts/TA10-313A.html	Third Party Advisory US Government Resource
http://www.vupen.com/english/advisories/2010/2923	Broken Link
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087	Patch Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11931	Broken Link

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:microsoft:office:2003:sp3::::::
	cpe:2.3:a:microsoft:office:2004:::::macos::
	cpe:2.3:a:microsoft:office:2007:sp2::::::
	cpe:2.3:a:microsoft:office:2008:::::macos::
	cpe:2.3:a:microsoft:office:2010:::::::*
	cpe:2.3:a:microsoft:office:2011:::::macos::
	cpe:2.3:a:microsoft:office:xp:sp3::::::
	cpe:2.3:a:microsoft:open_xml_file_format_converter:-:::::macos::

History

21 Nov 2024, 01:18

Type	Values Removed	Values Added
References	~~() http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=880 - Broken Link~~	() http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=880 - Broken Link
References	~~() http://secunia.com/advisories/38521 - Broken Link~~	() http://secunia.com/advisories/38521 - Broken Link
References	~~() http://secunia.com/advisories/42144 - Broken Link~~	() http://secunia.com/advisories/42144 - Broken Link
References	~~() http://securityreason.com/securityalert/8293 - Broken Link~~	() http://securityreason.com/securityalert/8293 - Broken Link
References	~~() http://www.securityfocus.com/bid/44652 - Broken Link, Third Party Advisory, VDB Entry~~	() http://www.securityfocus.com/bid/44652 - Broken Link, Third Party Advisory, VDB Entry
References	~~() http://www.securitytracker.com/id?1024705 - Broken Link, Third Party Advisory, VDB Entry~~	() http://www.securitytracker.com/id?1024705 - Broken Link, Third Party Advisory, VDB Entry
References	~~() http://www.us-cert.gov/cas/techalerts/TA10-313A.html - Third Party Advisory, US Government Resource~~	() http://www.us-cert.gov/cas/techalerts/TA10-313A.html - Third Party Advisory, US Government Resource
References	~~() http://www.vupen.com/english/advisories/2010/2923 - Broken Link~~	() http://www.vupen.com/english/advisories/2010/2923 - Broken Link
References	~~() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087 - Patch, Vendor Advisory~~	() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087 - Patch, Vendor Advisory
References	~~() https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11931 - Broken Link~~	() https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11931 - Broken Link

16 Jul 2024, 17:38

Type	Values Removed	Values Added
CWE	~~CWE-119~~	CWE-787
CPE	cpe:2.3:a:microsoft:office:2008::mac::::: cpe:2.3:a:microsoft:office:2011::mac::::: cpe:2.3:a:microsoft:office:2004::mac::::: cpe:2.3:a:microsoft:open_xml_file_format_converter:::mac:::::*	cpe:2.3:a:microsoft:office:2008:::::macos:: cpe:2.3:a:microsoft:office:2011:::::macos:: cpe:2.3:a:microsoft:open_xml_file_format_converter:-:::::macos:: cpe:2.3:a:microsoft:office:2004:::::macos::
References	~~() http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=880 -~~	() http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=880 - Broken Link
References	~~() http://secunia.com/advisories/38521 -~~	() http://secunia.com/advisories/38521 - Broken Link
References	~~() http://secunia.com/advisories/42144 -~~	() http://secunia.com/advisories/42144 - Broken Link
References	~~() http://securityreason.com/securityalert/8293 -~~	() http://securityreason.com/securityalert/8293 - Broken Link
References	~~() http://www.securityfocus.com/bid/44652 -~~	() http://www.securityfocus.com/bid/44652 - Broken Link, Third Party Advisory, VDB Entry
References	~~() http://www.securitytracker.com/id?1024705 -~~	() http://www.securitytracker.com/id?1024705 - Broken Link, Third Party Advisory, VDB Entry
References	~~() http://www.us-cert.gov/cas/techalerts/TA10-313A.html - US Government Resource~~	() http://www.us-cert.gov/cas/techalerts/TA10-313A.html - Third Party Advisory, US Government Resource
References	~~() http://www.vupen.com/english/advisories/2010/2923 -~~	() http://www.vupen.com/english/advisories/2010/2923 - Broken Link
References	~~() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087 -~~	() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087 - Patch, Vendor Advisory
References	~~() https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11931 -~~	() https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11931 - Broken Link
CVSS	v2 : ~~9.3~~ v3 : ~~unknown~~	v2 : 9.3 v3 : 7.8

Information

Published : 2010-11-10 03:00

Updated : 2024-11-21 01:18

NVD link : CVE-2010-3333

Mitre link : CVE-2010-3333

CVE.ORG link : CVE-2010-3333

JSON object : View

Products Affected

microsoft

open_xml_file_format_converter
office

CWE

CWE-787

Out-of-bounds Write

7.8 /10