CVE-2010-3951

2010-12-1619:33:03

CWE-119

microsoft

web.nvd.nist.gov

cve-2010-3951

buffer overflow

flashpix

image converter

microsoft office xp

office converter pack

graphics filters

remote code execution

vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.908

Percentile

98.9%

JSON

Buffer overflow in the FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted FlashPix image in an Office document, aka “FlashPix Image Converter Buffer Overflow Vulnerability.”

Affected configurations

Nvd

Node

microsoftofficeMatchxpsp3

microsoftoffice_converter_pack

VendorProductVersionCPE
microsoftofficexpcpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*
microsoftoffice_converter_pack*cpe:2.3:a:microsoft:office_converter_pack:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	office	xp	cpe:2.3:a:microsoft:office:xp:sp3::::::
microsoft	office_converter_pack	*	cpe:2.3:a:microsoft:office_converter_pack::::::::