CVEvulnerability
CVE-2010-3336
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-11-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Microsoft Office XP SP3, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "MSO Large SPID Read AV Vulnerability."
Affected configurations
• microsoft office 2004
• microsoft office 2008
• microsoft office 2011
• microsoft office xp
• microsoft open xml file format converter
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/38521 secunia.com
- http://secunia.com/advisories/42144 secunia.com
- http://www.securityfocus.com/bid/44660 www.securityfocus.com
- http://www.securitytracker.com/id?1024705 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA10-313A.html US Government Resource
- http://www.vupen.com/english/advisories/2010/2923 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11947 oval.cisecurity.org
- http://secunia.com/advisories/38521 secunia.com
- http://secunia.com/advisories/42144 secunia.com
- http://www.securityfocus.com/bid/44660 www.securityfocus.com
- http://www.securitytracker.com/id?1024705 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA10-313A.html US Government Resource
- http://www.vupen.com/english/advisories/2010/2923 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11947 oval.cisecurity.org