← CVE Radar
CVE-2010-3333Microsoft Office Stack-based Buffer Overflow Vulnerability
Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via crafted RTF data, aka "RTF Stack Buffer Overflow Vulnerability."
7.8 HIGHEPSS 89.38%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.8 | HIGH | 3.1NVD | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 9.3 | HIGH | 2.0NVD | AV:N/AC:M/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due Mar 24, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2010-3333
- Status
- Analyzed
- Assigner (CNA)
- microsoft
- Published
- Nov 10, 2010
- Last modified
- 2026-06-16 23:22 UTC
Affected Products
From NVD CPE configurations.
microsoftoffice7 version ranges
- 2003 sp3
- 2004
- 2007 sp2
- 2008
- 2010
- 2011
- xp sp3
microsoftopen xml file format converter0 version ranges
No version detail published.
References
- labs.idefense.com http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=880
- secunia.com http://secunia.com/advisories/38521
- secunia.com http://secunia.com/advisories/42144
- securityreason.com http://securityreason.com/securityalert/8293
- securityfocus.com http://www.securityfocus.com/bid/44652
- securitytracker.com http://www.securitytracker.com/id?1024705
- us-cert.gov http://www.us-cert.gov/cas/techalerts/TA10-313A.html
- vupen.com http://www.vupen.com/english/advisories/2010/2923
- docs.microsoft.com https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087
- oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11931
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3333