CVE-2010-1902

Buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac…

published August 11, 2010

CVSS
—
EPSS
23%
Percentile
97.8
In the wild
Unconfirmed
What it is

⚠️ Watch out for crafted RTF documents! A sneaky buffer overflow in Microsoft Office could let remote attackers execute arbitrary code, turning your document into a digital ticking time bomb! 🔥 Think of it like a restaurant serving food with undisclosed allergens — one wrong ingredient can cause a serious reaction. In this case, the crafted RTF document serves up malicious code that can exploit software vulnerabilities and wreak havoc. An attacker could send a seemingly innocent RTF document, and if opened, it could lead to unauthorized remote code execution. This means they could take over your system, access sensitive data or even corrupt files, making it a surprisingly serious risk for users!

Put simply

Think of it like a restaurant serving food with undisclosed allergens — one wrong ingredient can cause a serious reaction. In this case, the crafted RTF document serves up malicious code that can exploit software vulnerabilities and wreak havoc. This vulnerability arises from a buffer overflow in several versions of Microsoft Office, where the software mishandles certain properties in an RTF document. When processed, this flaw can give an attacker the ability to run arbitrary code on the affected system.

What to do

An attacker could send a seemingly innocent RTF document, and if opened, it could lead to unauthorized remote code execution. This means they could take over your system, access sensitive data or even corrupt files, making it a surprisingly serious risk for users! To protect yourself, ensure that you have the latest security updates installed for Microsoft Office. Consider disabling the use of RTF documents or using a different document format, and always be cautious of unsolicited attachments. 🛡️ You've got this! By following these steps, you can keep your systems safe and secure! 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.23415 · 97.8th percentile
Published
2010-08-11T18:00Z
EPSS history
Timeline
  • 11 AUG 18:00Z
    Buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac…
    cvelistv5