Product:
Microsoft Office
Summary
A stack-based buffer overflow vulnerability exists in Microsoft Office products that allows remote attackers to execute arbitrary code via crafted RTF data. This vulnerability affects multiple versions of Office, including Office XP, 2003, 2007, 2010, and various Mac versions. It is also known as the RTF Stack Buffer Overflow Vulnerability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2010-3333 |
Exploitation
To exploit this vulnerability, an attacker can craft a malicious RTF file and send it to a user. When the user opens the file in an affected version of Microsoft Office, the crafted data can trigger the buffer overflow, allowing the attacker to execute arbitrary code on the user’s system. User interaction is required to open the malicious file, making social engineering tactics a common method of delivery.
Affected Products
- Microsoft Office XP SP3
- Microsoft Office 2003 SP3
- Microsoft Office 2007 SP2
- Microsoft Office 2010
- Microsoft Office 2004 for Mac
- Microsoft Office 2008 for Mac
- Microsoft Office for Mac 2011
- Open XML File Format Converter for Mac
Mitigation
To mitigate this vulnerability, users should apply the latest updates and patches provided by Microsoft as per their instructions. Regularly updating software can help protect against known vulnerabilities.
References
- Idefense Vulnerability Report
- Secunia Advisory 38521
- Secunia Advisory 42144
- Security Reason Alert 8293
- SecurityFocus BID 44652
- SecurityTracker ID 1024705
- US-CERT Tech Alert TA10-313A
- VUPEN Advisory 2010/2923
- Microsoft Security Bulletin MS10-087
- CISecurity OVAL Definition
- CISA Known Exploited Vulnerabilities Catalog