CVE-2010-3945

2010-12-1619:33:02

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.908

Percentile

98.9%

JSON

Buffer overflow in the CGM image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted CGM image in an Office document, aka “CGM Image Converter Buffer Overrun Vulnerability.”

Affected configurations

Nvd

Node

microsoftofficeMatch2003sp3

microsoftofficeMatchxpsp3

microsoftoffice_converter_pack

VendorProductVersionCPE
microsoftoffice2003cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*
microsoftofficexpcpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*
microsoftoffice_converter_pack*cpe:2.3:a:microsoft:office_converter_pack:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	office	2003	cpe:2.3:a:microsoft:office:2003:sp3::::::
microsoft	office	xp	cpe:2.3:a:microsoft:office:xp:sp3::::::
microsoft	office_converter_pack	*	cpe:2.3:a:microsoft:office_converter_pack::::::::