Unscored severity · published Dec 16, 2010
CVE-2010-3945
Buffer overflow in the CGM image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute…
–
CVSS
24.7%
EPSS
No
On KEV
Description
Buffer overflow in the CGM image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted CGM image in an Office document, aka "CGM Image Converter Buffer Overrun Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)24.7% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OF
Office · Microsoft
2003; xp · source: NVD
OC
Office Converter Pack · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3945
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3945
www.securitytracker.com
http://www.securitytracker.com/id?1024887
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA10-348A.html
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-105
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12249
More from Office
9.8
CVE-2024-21413
Microsoft Outlook Remote Code Execution Vulnerability
9.8
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
8.8
CVE-2024-38189
Microsoft Project Remote Code Execution Vulnerability
8.8
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
8.8
CVE-2019-1297
Microsoft Excel Remote Code Execution Vulnerability