CVE-2010-3333
HIGHStack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter…
EPSS Exploitation Probability
EPSS (Exploit Prediction Scoring System) is a daily probability model maintained by FIRST.org. It estimates the likelihood a CVE will be exploited in production environments within the next 30 days, derived from real-world threat intelligence signals.
Description
Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via crafted RTF data, aka "RTF Stack Buffer Overflow Vulnerability."
Affected Products
officemicrosoftopen xml file format convertermicrosoftResearch use only. For defensive security, authorized penetration testing, and academic research only. Never execute exploit code against systems without explicit written authorization.
Microsoft Word - '.RTF' pFragments Stack Buffer Overflow (File Format) (MS10-087) (Metasploit)
by Metasploit · Mar 4, 2011
Microsoft Office 2010 - Download Execute
by g11tch · Feb 20, 2013
Microsoft Office 2003 Home/Pro - Code Execution (MS10-087)
by b33f & g11tch · Jan 8, 2012
Microsoft Office 2010 - '.RTF' Header Stack Overflow
by Snake · Jul 3, 2011
Frequently Asked Questions
Is CVE-2010-3333 in your stack?
O3 detects CVE-2010-3333 across dependencies and uses function-level reachability to confirm whether the vulnerable code path is actually reachable — not just present. No false positives.