CVE-2010-3335

Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter…

published November 10, 2010

CVSS
—
EPSS
24%
Percentile
97.8
In the wild
Unconfirmed
What it is

⚠️ A single crafted Office document could trigger a memory corruption nightmare! This vulnerability in multiple Microsoft Office versions is like a beautifully wrapped gift hiding a nasty surprise inside. 🎁 Think of it like a restaurant serving a dish that looks irresistible but is prepared without checking for allergens. If an unsuspecting diner takes a bite, it could lead to serious consequences. This vulnerability lets attackers deliver malicious code through seemingly innocent documents. An attacker could execute arbitrary code on the victim's system simply by getting them to open a malicious Office file. This means they could potentially steal sensitive data, install malware, or even take control of the entire system. Talk about an unwelcome surprise!

Put simply

Think of it like a restaurant serving a dish that looks irresistible but is prepared without checking for allergens. If an unsuspecting diner takes a bite, it could lead to serious consequences. This vulnerability lets attackers deliver malicious code through seemingly innocent documents. This vulnerability, known as the 'Drawing Exception Handling Vulnerability,' allows remote attackers to exploit memory corruption issues in various versions of Microsoft Office, leading to unauthorized code execution when a user opens a specially crafted document.

What to do

An attacker could execute arbitrary code on the victim's system simply by getting them to open a malicious Office file. This means they could potentially steal sensitive data, install malware, or even take control of the entire system. Talk about an unwelcome surprise! To protect against this vulnerability, ensure that all affected Microsoft Office versions are updated to their latest service packs. Additionally, educate users to be cautious about opening documents from untrusted sources. Regularly review your organization's security policies surrounding document handling, too! You've got this! With a little diligence and a few updates, you can keep your systems safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.23915 · 97.8th percentile
Published
2010-11-10T01:00Z
EPSS history
Timeline
  • 10 NOV 01:00Z
    Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter…
    cvelistv5