Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
attackerkbAttackerKBAKB:EF06DFEA-51B0-4EEF-853F-DF7BB23652F6
HistoryNov 10, 2010 - 12:00 a.m.

CVE-2010-3333

2010-11-1000:00:00
attackerkb.com
21

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

EPSS

0.973

Percentile

99.9%

JSON

Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via crafted RTF data, aka β€œRTF Stack Buffer Overflow Vulnerability.”

Recent assessments:

dmelcher5151 at April 15, 2020 4:16pm UTC reported:

Was the bread and butter for many phishing campaigns for years.

Assessed Attacker Value: 5
Assessed Attacker Value: 5Assessed Attacker Value: 4

Related

metasploit 1
cisa_kev 1
exploitdb 4
cve 1
saint 4
nvd 1
checkpoint_advisories 2
securityvulns 3
thn 5
seebug 2
prion 1
cvelist 1
zdt 2
packetstorm 1
threatpost 9
exploitpack 1
fireeye 2
nessus 2
openvas 2
mskb 1
kitploit 1
n0where 1
myhack58 1
metasploit
metasploit
MS10-087 Microsoft Word RTF pFragments Stack Buffer Overflow (File Format)
2010-12-29 20:30:50
cisa_kev
cisa_kev
Microsoft Office Stack-based Buffer Overflow Vulnerability
2022-03-03 00:00:00
exploitdb
exploitdb
Microsoft Office 2010 - Download Execute
2013-02-20 00:00:00
Microsoft Word - '.RTF' pFragments Stack Buffer Overflow (File Format) (MS10-087) (Metasploit)
2011-03-04 00:00:00
Microsoft Office 2003 Home/Pro - Code Execution (MS10-087)
2012-01-08 00:00:00
cve
cve
CVE-2010-3333
2010-11-10 03:00:02
saint
saint
Microsoft Office RTF pFragments Property Stack Buffer Overflow
2010-11-16 00:00:00
Microsoft Office RTF pFragments Property Stack Buffer Overflow
2010-11-16 00:00:00
Microsoft Office RTF pFragments Property Stack Buffer Overflow
2010-11-16 00:00:00
nvd
nvd
CVE-2010-3333
2010-11-10 03:00:02
checkpoint_advisories
checkpoint_advisories
Microsoft Office RTF Stack Buffer Overflow (MS10-087) - Ver2 (CVE-2010-3333)
2015-03-26 00:00:00
Microsoft Office RTF Stack Buffer Overflow (MS10-087; CVE-2010-3333)
2010-11-09 00:00:00
securityvulns
securityvulns
iDefense Security Advisory 11.09.10: Microsoft Word RTF File Parsing Stack Buffer Overflow Vulnerability
2010-11-10 00:00:00
Microsoft Security Bulletin MS10-087 - Critical Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2423930)
2010-11-10 00:00:00
Microsoft Office multiple security vulnerabilities
2010-11-15 00:00:00
thn
thn
Chinese Trojans Gh0stRAT used to attack pro-Tibet organisations
2012-03-14 21:54:00
A Decade-Long Chinese Espionage Campaign Targets Southeast Asia and Australia
2022-06-09 11:00:00
Operation Red October : Cyber Espionage campaign against many Governments
2013-01-15 10:49:00
seebug
seebug
Microsoft Word RTFζ–‡δ»Άθ§£ζžζ ˆζΊ’ε‡ΊζΌζ΄ž(MS10-087)
2010-11-17 00:00:00
MS Office 2010 RTF Header Stack Overflow Vulnerability Exploit
2011-07-04 00:00:00
prion
prion
Stack overflow
2010-11-10 03:00:00
cvelist
cvelist
CVE-2010-3333
2010-11-10 01:00:00
zdt
zdt
Office 2003 SP3, Office 2007 SP2, Office 2011 Stack-based buffer overflow
2014-01-30 00:00:00
MS Office 2010 RTF Header Stack Overflow Vulnerability Exploity Exploit
2011-07-03 00:00:00
packetstorm
packetstorm
Microsoft Word RTF pFragments Stack Buffer Overflow
2010-12-29 00:00:00
threatpost
threatpost
Facing Attacks on RTF Hole, Microsoft Urges Office Users To Patch
2011-01-04 18:05:55
China-linked APT Flew Under Radar for Decade
2022-06-17 13:34:04
Anti-Tibetan Attack Stems from Nvidia Abuse, Old RTF Vulnerability
2013-02-27 19:10:44
exploitpack
exploitpack
Microsoft Office 2010 - .RTF Header Stack Overflow
2011-07-03 00:00:00
fireeye
fireeye
How RTF malware evades static signature-based detection
2016-05-20 14:59:00
How RTF malware evades static signature-based detection
2016-05-20 14:59:00
nessus
nessus
MS10-087: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2423930) (Mac OS X)
2010-11-09 00:00:00
MS10-087: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2423930)
2010-11-09 00:00:00
openvas
openvas
Microsoft Office Remote Code Execution Vulnerabilities (2423930)
2010-11-10 00:00:00
Microsoft Office Remote Code Execution Vulnerabilities (2423930)
2010-11-10 00:00:00
mskb
mskb
MS10-087: Vulnerabilities in Microsoft Office could allow remote code execution
2014-06-21 14:34:09
kitploit
kitploit
cve-search - A Tool To Perform Local Searches For Known Vulnerabilities
2017-10-17 13:30:00
n0where
n0where
Perform Local Searches For Known Vulnerabilities: cve-search
2017-10-30 00:56:57
myhack58
myhack58
The macro perspective of the office vulnerability, 2010-2018-a vulnerability warning-the black bar safety net
2019-06-13 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

8.3

Confidence

High

EPSS

0.973

Percentile

99.9%

JSON
Related for AKB:EF06DFEA-51B0-4EEF-853F-DF7BB23652F6
metasploit1cisa_kev1exploitdb4cve1saint4nvd1checkpoint_advisories2securityvulns3thn5seebug2prion1cvelist1zdt2packetstorm1threatpost9exploitpack1fireeye2nessus2openvas2mskb1kitploit1n0where1myhack581