CVE-2010-2572KEV · OVERDUE

Microsoft PowerPoint Buffer Overflow Vulnerability

High · published November 10, 2010

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 99.1th percentile for exploit probability.

1584
days past CISA
deadline
CVSS v3.1
7.8
EPSS
59%
Percentile
99.1
In the wild
Confirmed
What it is

🚨 A crafted PowerPoint 95 document can lead to remote code execution in PowerPoint 2002 and 2003 — it’s like a Trojan horse sneaking into your office disguised as a presentation! Think of it as a delivery person bringing a package stuffed with malicious surprises instead of useful slides. If you don’t check the contents first, you might find your system compromised without even realizing it! An attacker could exploit this vulnerability to execute arbitrary code on affected systems, potentially gaining full control over your machine. This means they could steal sensitive information, alter files, or even install malware — an absolutely devastating scenario for your security!

Put simply

Think of it as a delivery person bringing a package stuffed with malicious surprises instead of useful slides. If you don’t check the contents first, you might find your system compromised without even realizing it! This vulnerability arises from a buffer overflow due to improper handling of specific PowerPoint 95 documents, allowing attackers to manipulate memory and execute their own malicious code when the document is opened.

What to do

An attacker could exploit this vulnerability to execute arbitrary code on affected systems, potentially gaining full control over your machine. This means they could steal sensitive information, alter files, or even install malware — an absolutely devastating scenario for your security! To protect yourself, ensure you upgrade Microsoft PowerPoint to the latest version that has patched this vulnerability. Additionally, educate users not to open suspicious PowerPoint files, especially older formats, and consider implementing email filtering to block potentially harmful attachments. You've got this! Stay vigilant and follow these steps to secure your systems. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.58646 · 99.1th percentile
Published
2010-11-10T01:00Z
KEV added
2022-06-08 · due 2022-06-22
EPSS history
Timeline
  • 08 JUN 00:00Z
    Added to CISA KEV — remediate by Jun 22
    kev
  • 10 NOV 01:00Z
    Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 document, aka…
    cvelistv5