High severity · published Nov 10, 2010
CVE-2010-3333
Microsoft Office Stack-based Buffer Overflow Vulnerability
In wildKEV
7.8
CVSS
89.4%
EPSS
Yes
On KEV
Description
Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via crafted RTF data, aka "RTF Stack Buffer Overflow Vulnerability."
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)89.4% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Mar 3, 2022
Federal remediation dueMar 24, 2022
Ransomware campaign useNot known
Affected products
Which versions
OF
Office · Microsoft
2003; 2004; 2007; 2008; 2010; 2011; +1 more · source: NVD, KEV
OX
Open Xml File Format Converter · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3333
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3333
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Broken Link
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=880
Broken Link
http://secunia.com/advisories/38521
Broken Link
http://secunia.com/advisories/42144
Broken Link
http://securityreason.com/securityalert/8293
Broken Link
http://www.securityfocus.com/bid/44652
Broken Link
http://www.securitytracker.com/id?1024705
More from Office
9.8
CVE-2024-21413
Microsoft Outlook Remote Code Execution Vulnerability
9.8
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
8.8
CVE-2024-38189
Microsoft Project Remote Code Execution Vulnerability
8.8
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
8.8
CVE-2019-1297
Microsoft Excel Remote Code Execution Vulnerability