CVE-2010-3946

EPSS 66.91%
Published 16.12.2010 19:33:02
Last modified 11.04.2025 00:51:21
Source secure@microsoft.com
Teams watchlist Login
Open Login

Integer overflow in the PICT image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted PICT image in an Office document, aka "PICT Image Converter Integer Overflow Vulnerability."

Affected products Warnungen 0 Metrics 2 CWE 0 References 7

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Office Version2003 Updatesp3

Microsoft ≫ Office Versionxp Updatesp3

Microsoft ≫ Office Converter Pack

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	66.91%	0.985

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://www.us-cert.gov/cas/techalerts/TA10-348A.html

US Government Resource

http://www.securitytracker.com/id?1024887

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-105

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11967

https://nvd.nist.gov/vuln/detail/CVE-2010-3946

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-3946

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-3946

EUVD