CVEvulnerability

CVE-2010-3333

7.8 HIGH Known exploited Published 2010-11-10 Modified 2026-06-16 Official page ↗

CISA Known Exploited Vulnerability

Microsoft Office Stack-based Buffer Overflow Vulnerability — Microsoft Office

A stack-based buffer overflow vulnerability exists in the parsing of RTF data in Microsoft Office and earlier allows an attacker to perform remote code execution.

Added to KEV
2022-03-03
Remediation due
2022-03-24
Ransomware use
Unknown
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2010-3333
Status
Analyzed
Published
2010-11-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-787

Description

Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via crafted RTF data, aka "RTF Stack Buffer Overflow Vulnerability."

Affected configurations

• microsoft office 2003 • microsoft office 2004 • microsoft office 2007 • microsoft office 2008 • microsoft office 2010 • microsoft office 2011 • microsoft office xp • microsoft open xml file format converter

Related

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References