9.3

CVE-2010-3333

Warnung
Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via crafted RTF data, aka "RTF Stack Buffer Overflow Vulnerability."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Office Version 2003 Update sp3
Microsoft ≫ Office Version 2004 SwPlatform macos
Microsoft ≫ Office Version 2007 Update sp2
Microsoft ≫ Office Version 2008 SwPlatform macos
Microsoft ≫ Office Version 2010
Microsoft ≫ Office Version 2011 SwPlatform macos
Microsoft ≫ Office Version xp Update sp3
Microsoft ≫ Open Xml File Format Converter Version - SwPlatform macos

03.03.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

Microsoft Office Stack-based Buffer Overflow Vulnerability

Schwachstelle

A stack-based buffer overflow vulnerability exists in the parsing of RTF data in Microsoft Office and earlier allows an attacker to perform remote code execution.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 89.5% 0.998
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NIST 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CISA-ADP 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

http://www.us-cert.gov/cas/techalerts/TA10-313A.html
Third Party Advisory
US Government Resource
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=880
Broken Link
http://secunia.com/advisories/38521
Broken Link
http://secunia.com/advisories/42144
Broken Link
http://securityreason.com/securityalert/8293
Broken Link
http://www.securityfocus.com/bid/44652
Third Party Advisory
Broken Link
VDB Entry
http://www.securitytracker.com/id?1024705
Third Party Advisory
Broken Link
VDB Entry
http://www.vupen.com/english/advisories/2010/2923
Broken Link
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087
Patch
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11931
Broken Link
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3333
US Government Resource