CVE-2010-1901

Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; and…

published August 11, 2010

CVSS
—
EPSS
19%
Percentile
97.3
In the wild
Unconfirmed
What it is

🚨 A crafted RTF document can unleash chaos on your Word installations! This vulnerability, found in various Microsoft Office versions, could let attackers execute arbitrary code or cause memory corruption. 🔥 Think of this vulnerability like a sneaky con artist slipping a counterfeit bill into a cash register. When the unsuspecting cashier (your Word app) tries to process it, it can cause everything to go haywire! An attacker could craft a seemingly innocent RTF document that, when opened, could execute arbitrary code, giving them unauthorized access to your system. Alternatively, it could lead to a denial of service, causing your Word application to crash and leaving you in a frustrating bind!

Put simply

Think of this vulnerability like a sneaky con artist slipping a counterfeit bill into a cash register. When the unsuspecting cashier (your Word app) tries to process it, it can cause everything to go haywire! The vulnerability stems from Microsoft Office not handling certain properties in rich text data correctly, which creates opportunities for memory corruption and code execution when processing crafted RTF files.

What to do

An attacker could craft a seemingly innocent RTF document that, when opened, could execute arbitrary code, giving them unauthorized access to your system. Alternatively, it could lead to a denial of service, causing your Word application to crash and leaving you in a frustrating bind! To protect yourself, ensure that you're using the latest updates for your Microsoft Office applications. If you're still running on older versions like Word 2002, 2003, or 2007, consider upgrading to a more secure version. Also, be cautious when opening documents from untrusted sources! You've got this! With a little vigilance and timely updates, you can keep your Office applications secure. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.19399 · 97.3th percentile
Published
2010-08-11T18:00Z
EPSS history
Timeline
  • 11 AUG 18:00Z
    Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; and…
    cvelistv5