CVE-2010-3333

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2010-3333
Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via crafted RTF data, aka "RTF Stack Buffer Overflow Vulnerability."

7.8 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

9.3 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=880 Broken Link
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=880 Broken Link
http://secunia.com/advisories/38521 Broken Link
http://secunia.com/advisories/38521 Broken Link
http://secunia.com/advisories/42144 Broken Link
http://secunia.com/advisories/42144 Broken Link
http://securityreason.com/securityalert/8293 Broken Link
http://securityreason.com/securityalert/8293 Broken Link
http://www.securityfocus.com/bid/44652 Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/44652 Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1024705 Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1024705 Broken Link Third Party Advisory VDB Entry
http://www.us-cert.gov/cas/techalerts/TA10-313A.html Third Party Advisory US Government Resource
http://www.us-cert.gov/cas/techalerts/TA10-313A.html Third Party Advisory US Government Resource
http://www.vupen.com/english/advisories/2010/2923 Broken Link
http://www.vupen.com/english/advisories/2010/2923 Broken Link
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087 Patch Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087 Patch Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11931 Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11931 Broken Link
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2010:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:office:2008:*:*:*:*:macos:*:*
cpe:2.3:a:microsoft:open_xml_file_format_converter:-:*:*:*:*:macos:*:*
cpe:2.3:a:microsoft:office:2004:*:*:*:*:macos:*:*
cpe:2.3:a:microsoft:office:2011:*:*:*:*:macos:*:*
History

19 Dec 2024, 18:20

Type Values Removed Values Added
References (MS) https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087 - Patch, Vendor Advisory () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087 - Patch, Vendor Advisory
References (SECTRACK) http://www.securitytracker.com/id?1024705 - Broken Link, Third Party Advisory, VDB Entry () http://www.securitytracker.com/id?1024705 - Broken Link, Third Party Advisory, VDB Entry
References (OVAL) https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11931 - Broken Link () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11931 - Broken Link
References (CERT) http://www.us-cert.gov/cas/techalerts/TA10-313A.html - Third Party Advisory, US Government Resource () http://www.us-cert.gov/cas/techalerts/TA10-313A.html - Third Party Advisory, US Government Resource
References (VUPEN) http://www.vupen.com/english/advisories/2010/2923 - Broken Link () http://www.vupen.com/english/advisories/2010/2923 - Broken Link
References (SECUNIA) http://secunia.com/advisories/38521 - Broken Link () http://secunia.com/advisories/38521 - Broken Link
References (SECUNIA) http://secunia.com/advisories/42144 - Broken Link () http://secunia.com/advisories/42144 - Broken Link
References (BID) http://www.securityfocus.com/bid/44652 - Broken Link, Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/44652 - Broken Link, Third Party Advisory, VDB Entry
References (SREASON) http://securityreason.com/securityalert/8293 - Broken Link () http://securityreason.com/securityalert/8293 - Broken Link
References (IDEFENSE) http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=880 - Broken Link () http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=880 - Broken Link

16 Jul 2024, 17:38

Type Values Removed Values Added
CPE cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*
cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*
cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*
cpe:2.3:a:microsoft:office:2011:*:mac:*:*:*:*:*		 cpe:2.3:a:microsoft:office:2011:*:*:*:*:macos:*:*
cpe:2.3:a:microsoft:office:2004:*:*:*:*:macos:*:*
cpe:2.3:a:microsoft:office:2008:*:*:*:*:macos:*:*
cpe:2.3:a:microsoft:open_xml_file_format_converter:-:*:*:*:*:macos:*:*
CWE CWE-119 CWE-787
CVSS v2 : 9.3
v3 : unknown 		v2 : 9.3
v3 : 7.8
References (VUPEN) http://www.vupen.com/english/advisories/2010/2923 - (VUPEN) http://www.vupen.com/english/advisories/2010/2923 - Broken Link
References (CERT) http://www.us-cert.gov/cas/techalerts/TA10-313A.html - US Government Resource (CERT) http://www.us-cert.gov/cas/techalerts/TA10-313A.html - Third Party Advisory, US Government Resource
References (MS) https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087 - (MS) https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087 - Patch, Vendor Advisory
References (BID) http://www.securityfocus.com/bid/44652 - (BID) http://www.securityfocus.com/bid/44652 - Broken Link, Third Party Advisory, VDB Entry
References (IDEFENSE) http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=880 - (IDEFENSE) http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=880 - Broken Link
References (SECTRACK) http://www.securitytracker.com/id?1024705 - (SECTRACK) http://www.securitytracker.com/id?1024705 - Broken Link, Third Party Advisory, VDB Entry
References (SREASON) http://securityreason.com/securityalert/8293 - (SREASON) http://securityreason.com/securityalert/8293 - Broken Link
References (SECUNIA) http://secunia.com/advisories/38521 - (SECUNIA) http://secunia.com/advisories/38521 - Broken Link
References (OVAL) https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11931 - (OVAL) https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11931 - Broken Link
References (SECUNIA) http://secunia.com/advisories/42144 - (SECUNIA) http://secunia.com/advisories/42144 - Broken Link
Information

Published : 2010-11-10 03:00

Updated : 2025-04-07 19:13

NVD link : CVE-2010-3333

Mitre link : CVE-2010-3333

JSON object : View

Products Affected

microsoft

  • open_xml_file_format_converter
  • office
CWE
CWE-787

Out-of-bounds Write