CVE-2010-3946

EPSS 66.91%
Veröffentlicht 16.12.2010 19:33:02
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle secure@microsoft.com
Teams Watchlist Login
Unerledigt Login

Integer overflow in the PICT image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted PICT image in an Office document, aka "PICT Image Converter Integer Overflow Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Office Version2003 Updatesp3

Microsoft ≫ Office Versionxp Updatesp3

Microsoft ≫ Office Converter Pack

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	66.91%	0.985

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://www.us-cert.gov/cas/techalerts/TA10-348A.html

US Government Resource

http://www.securitytracker.com/id?1024887

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-105

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11967

https://nvd.nist.gov/vuln/detail/CVE-2010-3946

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-3946

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-3946

EUVD