PT-2010-4746 · Microsoft · Office Xp Sp3+4

Published 2010-11-10 · Updated 2018-10-12 · CVE-2010-3336

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Office XP SP3 Office 2004 for Mac Office 2008 for Mac Office for Mac 2011 Open XML File Format Converter for Mac

Description The issue allows remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption.

Recommendations For Microsoft Office XP SP3, update to a version that fixes the memory corruption issue. For Office 2004 for Mac, update to a version that fixes the memory corruption issue. For Office 2008 for Mac, update to a version that fixes the memory corruption issue. For Office for Mac 2011, update to a version that fixes the memory corruption issue. For Open XML File Format Converter for Mac, update to a version that fixes the memory corruption issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-3336

Affected Products

Office Xp Sp3

Office 2004 For Mac

Office 2008 For Mac

Office For Mac 2011

Open Xml File Format Converter For Mac

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2010-3336 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11947 · Note
• http://secunia.com/advisories/38521 · Note
• http://securitytracker.com/id?1024705 · Note
• http://securityfocus.com/bid/44660 · Note
• http://vupen.com/english/advisories/2010/2923 · Note
• http://us-cert.gov/cas/techalerts/TA10-313A.html · Note
• http://secunia.com/advisories/42144 · Note