Unscored severity · published Dec 16, 2010
CVE-2010-3951
Buffer overflow in the FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code via…
–
CVSS
24.7%
EPSS
No
On KEV
Description
Buffer overflow in the FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted FlashPix image in an Office document, aka "FlashPix Image Converter Buffer Overflow Vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)24.7% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OF
Office · Microsoft
xp · source: NVD
OC
Office Converter Pack · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3951
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3951
www.securitytracker.com
http://www.securitytracker.com/id?1024887
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA10-348A.html
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-105
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12350
More from Office
9.8
CVE-2024-21413
Microsoft Outlook Remote Code Execution Vulnerability
9.8
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
8.8
CVE-2024-38189
Microsoft Project Remote Code Execution Vulnerability
8.8
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
8.8
CVE-2019-1297
Microsoft Excel Remote Code Execution Vulnerability