PT-2010-4746 · Microsoft · Office Xp Sp3+4

Publicado 2010-11-10 · Atualizado 2018-10-12 · CVE-2010-3336

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office XP SP3 Office 2004 for Mac Office 2008 for Mac Office for Mac 2011 Open XML File Format Converter for Mac

Description The issue allows remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption.

Recommendations For Microsoft Office XP SP3, update to a version that fixes the memory corruption issue. For Office 2004 for Mac, update to a version that fixes the memory corruption issue. For Office 2008 for Mac, update to a version that fixes the memory corruption issue. For Office for Mac 2011, update to a version that fixes the memory corruption issue. For Open XML File Format Converter for Mac, update to a version that fixes the memory corruption issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2010-3336

Produtos afetados

Office Xp Sp3

Office 2004 For Mac

Office 2008 For Mac

Office For Mac 2011

Open Xml File Format Converter For Mac

Referências · 9

• https://nvd.nist.gov/vuln/detail/CVE-2010-3336 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11947 · Nota
• http://secunia.com/advisories/38521 · Nota
• http://securitytracker.com/id?1024705 · Nota
• http://securityfocus.com/bid/44660 · Nota
• http://vupen.com/english/advisories/2010/2923 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087 · Aviso do Fabricante
• http://us-cert.gov/cas/techalerts/TA10-313A.html · Nota
• http://secunia.com/advisories/42144 · Nota