CVE-2010-3334 Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute....
HighCVSS 9.3
EPSS 25.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via an Office document containing an Office Art Drawing record with crafted msofbtSp records and unspecified flags, which triggers memory corruption, aka "Office Art Drawing Records Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office | = 2003-sp3 | No fix listed |
| Microsoft office | = 2004 | No fix listed |
| Microsoft office | = 2007-sp2 | No fix listed |
| Microsoft office | = 2008 | No fix listed |
| Microsoft office | = 2010 | No fix listed |
| Microsoft office | = 2011 | No fix listed |
| Microsoft office | = xp-sp3 | No fix listed |
| Microsoft open xml file format converter | All versions | No fix listed |
References
- 38521 third-party-advisory vendor-advisory
- 42144 third-party-advisory vendor-advisory
- secunia.com vendor-advisory
- 20101109 Secunia Research: Microsoft Office Drawing Shape Container Parsing Vulnerability mailing-list
- 44656 vdb-entry
- 1024705 vdb-entry
- TA10-313A third-party-advisory us-government-resource
- ADV-2010-2923 vdb-entry vendor-advisory
- MS10-087 vendor-advisory
- oval:org.mitre.oval:def:11439 signature vdb-entry