Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cisa_kevCISACISA-KEV-CVE-2010-3333
HistoryMar 03, 2022 - 12:00 a.m.

Microsoft Office Stack-based Buffer Overflow Vulnerability

2022-03-0300:00:00
CISA
www.cisa.gov
7
microsoft office
buffer overflow
rtf
remote code execution

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.973

Percentile

99.9%

JSON

A stack-based buffer overflow vulnerability exists in the parsing of RTF data in Microsoft Office and earlier allows an attacker to perform remote code execution.

Related

metasploit 1
exploitdb 4
cve 1
saint 4
attackerkb 1
nvd 1
seebug 2
prion 1
cvelist 1
checkpoint_advisories 2
securityvulns 3
thn 5
zdt 2
packetstorm 1
threatpost 9
exploitpack 1
fireeye 2
nessus 2
openvas 2
mskb 1
kitploit 1
n0where 1
myhack58 1
metasploit
metasploit
MS10-087 Microsoft Word RTF pFragments Stack Buffer Overflow (File Format)
2010-12-29 20:30:50
exploitdb
exploitdb
Microsoft Office 2010 - Download Execute
2013-02-20 00:00:00
Microsoft Word - '.RTF' pFragments Stack Buffer Overflow (File Format) (MS10-087) (Metasploit)
2011-03-04 00:00:00
Microsoft Office 2003 Home/Pro - Code Execution (MS10-087)
2012-01-08 00:00:00
cve
cve
CVE-2010-3333
2010-11-10 03:00:02
saint
saint
Microsoft Office RTF pFragments Property Stack Buffer Overflow
2010-11-16 00:00:00
Microsoft Office RTF pFragments Property Stack Buffer Overflow
2010-11-16 00:00:00
Microsoft Office RTF pFragments Property Stack Buffer Overflow
2010-11-16 00:00:00
attackerkb
attackerkb
CVE-2010-3333
2010-11-10 00:00:00
nvd
nvd
CVE-2010-3333
2010-11-10 03:00:02
seebug
seebug
Microsoft Word RTFζ–‡δ»Άθ§£ζžζ ˆζΊ’ε‡ΊζΌζ΄ž(MS10-087)
2010-11-17 00:00:00
MS Office 2010 RTF Header Stack Overflow Vulnerability Exploit
2011-07-04 00:00:00
prion
prion
Stack overflow
2010-11-10 03:00:00
cvelist
cvelist
CVE-2010-3333
2010-11-10 01:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Office RTF Stack Buffer Overflow (MS10-087) - Ver2 (CVE-2010-3333)
2015-03-26 00:00:00
Microsoft Office RTF Stack Buffer Overflow (MS10-087; CVE-2010-3333)
2010-11-09 00:00:00
securityvulns
securityvulns
iDefense Security Advisory 11.09.10: Microsoft Word RTF File Parsing Stack Buffer Overflow Vulnerability
2010-11-10 00:00:00
Microsoft Security Bulletin MS10-087 - Critical Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2423930)
2010-11-10 00:00:00
Microsoft Office multiple security vulnerabilities
2010-11-15 00:00:00
thn
thn
Chinese Trojans Gh0stRAT used to attack pro-Tibet organisations
2012-03-14 21:54:00
A Decade-Long Chinese Espionage Campaign Targets Southeast Asia and Australia
2022-06-09 11:00:00
Operation Red October : Cyber Espionage campaign against many Governments
2013-01-15 10:49:00
zdt
zdt
Office 2003 SP3, Office 2007 SP2, Office 2011 Stack-based buffer overflow
2014-01-30 00:00:00
MS Office 2010 RTF Header Stack Overflow Vulnerability Exploity Exploit
2011-07-03 00:00:00
packetstorm
packetstorm
Microsoft Word RTF pFragments Stack Buffer Overflow
2010-12-29 00:00:00
threatpost
threatpost
Facing Attacks on RTF Hole, Microsoft Urges Office Users To Patch
2011-01-04 18:05:55
China-linked APT Flew Under Radar for Decade
2022-06-17 13:34:04
Anti-Tibetan Attack Stems from Nvidia Abuse, Old RTF Vulnerability
2013-02-27 19:10:44
exploitpack
exploitpack
Microsoft Office 2010 - .RTF Header Stack Overflow
2011-07-03 00:00:00
fireeye
fireeye
How RTF malware evades static signature-based detection
2016-05-20 14:59:00
How RTF malware evades static signature-based detection
2016-05-20 14:59:00
nessus
nessus
MS10-087: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2423930) (Mac OS X)
2010-11-09 00:00:00
MS10-087: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2423930)
2010-11-09 00:00:00
openvas
openvas
Microsoft Office Remote Code Execution Vulnerabilities (2423930)
2010-11-10 00:00:00
Microsoft Office Remote Code Execution Vulnerabilities (2423930)
2010-11-10 00:00:00
mskb
mskb
MS10-087: Vulnerabilities in Microsoft Office could allow remote code execution
2014-06-21 14:34:09
kitploit
kitploit
cve-search - A Tool To Perform Local Searches For Known Vulnerabilities
2017-10-17 13:30:00
n0where
n0where
Perform Local Searches For Known Vulnerabilities: cve-search
2017-10-30 00:56:57
myhack58
myhack58
The macro perspective of the office vulnerability, 2010-2018-a vulnerability warning-the black bar safety net
2019-06-13 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.973

Percentile

99.9%

JSON
Related for CISA-KEV-CVE-2010-3333
metasploit1exploitdb4cve1saint4attackerkb1nvd1seebug2prion1cvelist1checkpoint_advisories2securityvulns3thn5zdt2packetstorm1threatpost9exploitpack1fireeye2nessus2openvas2mskb1kitploit1n0where1myhack581