CVE-2010-3333highunder attackCWE-787

CVE-2010-3333

Published · Updated

Follow this CVE+ Monitor Microsoft Office

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA, has a working public exploit and 2 threat group(s) use it.

ssvc Actcvss 7.8epss 89%
from disclosure to weapon114 days
Published on NVDNov 10
1st PoC+114d
metasploitNov 9
CISA KEV+4131d
Who exploits it — 2

Groups known to exploit this vulnerability (MITRE ATT&CK attribution).

APT / StateAoqin Dragon🇨🇳 MITRE ATT&CK
APT / StateTransparent Tribe🇮🇳 MITRE ATT&CK
Action required by CISAfederal deadline: 2022-03-24

Apply updates per vendor instructions.

In short

Microsoft Office versions fail to properly validate RTF file format data, allowing attackers to craft malicious files that overflow memory buffers and execute arbitrary code when opened by users.

Technical detail

Stack-based buffer overflow in RTF parsing across multiple Office versions (XP SP3, 2003 SP3, 2007 SP2, 2010, and Mac variants). Attack vector is remote via crafted RTF files; requires user interaction (opening malicious document). Impact allows arbitrary code execution with user privileges.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via crafted RTF data, aka "RTF Stack Buffer Overflow Vulnerability."
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.