CVEvulnerability
CVE-2010-3334
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-11-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via an Office document containing an Office Art Drawing record with crafted msofbtSp records and unspecified flags, which triggers memory corruption, aka "Office Art Drawing Records Vulnerability."
Affected configurations
• microsoft office 2003
• microsoft office 2004
• microsoft office 2007
• microsoft office 2008
• microsoft office 2010
• microsoft office 2011
• microsoft office xp
• microsoft open xml file format converter
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/38521 Vendor Advisory
- http://secunia.com/advisories/42144 Vendor Advisory
- http://secunia.com/secunia_research/2010-4/ Vendor Advisory
- http://www.securityfocus.com/archive/1/514699/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/44656 www.securityfocus.com
- http://www.securitytracker.com/id?1024705 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA10-313A.html US Government Resource
- http://www.vupen.com/english/advisories/2010/2923 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11439 oval.cisecurity.org
- http://secunia.com/advisories/38521 Vendor Advisory
- http://secunia.com/advisories/42144 Vendor Advisory
- http://secunia.com/secunia_research/2010-4/ Vendor Advisory
- http://www.securityfocus.com/archive/1/514699/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/44656 www.securityfocus.com
- http://www.securitytracker.com/id?1024705 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA10-313A.html US Government Resource
- http://www.vupen.com/english/advisories/2010/2923 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11439 oval.cisecurity.org