Vulnerability Description
Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via an Office document containing an Office Art Drawing record with crafted msofbtSp records and unspecified flags, which triggers memory corruption, aka "Office Art Drawing Records Vulnerability."
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Office | 2003 |
| Microsoft | Open Xml File Format Converter | All versions |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/38521Vendor Advisory
- http://secunia.com/advisories/42144Vendor Advisory
- http://secunia.com/secunia_research/2010-4/Vendor Advisory
- http://www.securityfocus.com/archive/1/514699/100/0/threaded
- http://www.securityfocus.com/bid/44656
- http://www.securitytracker.com/id?1024705
- http://www.us-cert.gov/cas/techalerts/TA10-313A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2010/2923Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-08
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3
- http://secunia.com/advisories/38521Vendor Advisory
- http://secunia.com/advisories/42144Vendor Advisory
- http://secunia.com/secunia_research/2010-4/Vendor Advisory
- http://www.securityfocus.com/archive/1/514699/100/0/threaded
- http://www.securityfocus.com/bid/44656
FAQ
What is CVE-2010-3334?
CVE-2010-3334 is a vulnerability with a CVSS score of 9.3 (HIGH). Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute ...
How severe is CVE-2010-3334?
CVE-2010-3334 has been rated HIGH with a CVSS base score of 9.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2010-3334?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Office, Microsoft Open Xml File Format Converter.