CVE-2010-3333
high · 7.8Actively exploitedOn the CISA Known Exploited Vulnerabilities catalog
Apply updates per vendor instructions.
Added 2022-03-03Remediation due 2022-03-24
Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via crafted RTF data, aka "RTF Stack Buffer Overflow Vulnerability."
7.8
CVSS
89.5%
EPSS (exploit prob.)
100th
EPSS percentile
2010-11-10
Published
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-787
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | office | 2003 |
| microsoft | office | 2004 |
| microsoft | office | 2007 |
| microsoft | office | 2008 |
| microsoft | office | 2010 |
| microsoft | office | 2011 |
| microsoft | office | xp |
| microsoft | open_xml_file_format_converter | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=880
- http://secunia.com/advisories/38521
- http://secunia.com/advisories/42144
- http://securityreason.com/securityalert/8293
- http://www.securityfocus.com/bid/44652
- http://www.securitytracker.com/id?1024705
- http://www.us-cert.gov/cas/techalerts/TA10-313A.html
- http://www.vupen.com/english/advisories/2010/2923
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11931
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=880
- http://secunia.com/advisories/38521
- http://secunia.com/advisories/42144
- http://securityreason.com/securityalert/8293
- http://www.securityfocus.com/bid/44652
- http://www.securitytracker.com/id?1024705
- http://www.us-cert.gov/cas/techalerts/TA10-313A.html
- http://www.vupen.com/english/advisories/2010/2923
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11931
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3333
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2010-3333