Lucene search

K
cveMicrosoftCVE-2010-2573
HistoryNov 10, 2010 - 3:00 a.m.

CVE-2010-2573

2010-11-1003:00:01
CWE-189
microsoft
web.nvd.nist.gov
61
cve-2010-2573
microsoft powerpoint
integer underflow
remote code execution
heap corruption

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

0.935

Percentile

99.1%

Integer underflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3, PowerPoint Viewer SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka β€œPowerPoint Integer Underflow Causes Heap Corruption Vulnerability.”

Affected configurations

Nvd
Node
microsoftofficeMatch2004mac
OR
microsoftpowerpointMatch2002sp3
OR
microsoftpowerpointMatch2003sp3
OR
microsoftpowerpoint_viewerMatch2007sp2
VendorProductVersionCPE
microsoftoffice2004cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*
microsoftpowerpoint2002cpe:2.3:a:microsoft:powerpoint:2002:sp3:*:*:*:*:*:*
microsoftpowerpoint2003cpe:2.3:a:microsoft:powerpoint:2003:sp3:*:*:*:*:*:*
microsoftpowerpoint_viewer2007cpe:2.3:a:microsoft:powerpoint_viewer:2007:sp2:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

0.935

Percentile

99.1%