Lucene search

K
cve[email protected]CVE-2010-2747
HistoryOct 13, 2010 - 7:00 p.m.

CVE-2010-2747

2010-10-1319:00:44
CWE-94
web.nvd.nist.gov
24
cve-2010-2747
microsoft word
office 2004
mac
remote code execution
memory corruption
vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.809 High

EPSS

Percentile

98.3%

Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle an uninitialized pointer during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka β€œWord Uninitialized Pointer Vulnerability.”

Affected configurations

NVD
Node
microsoftofficeMatch2004mac
OR
microsoftwordMatch2002sp3

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.809 High

EPSS

Percentile

98.3%