CVE-2010-3336

Published: Nov 10, 2010Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Microsoft Office XP SP3, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "MSO Large SPID Read AV Vulnerability."

Affected (5)

Products: Microsoft: Office, Open Xml File Format Converter

2 products

Open Xml File Format Converter

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Microsoft Office	Version 2004
Microsoft Office	Version 2008
Microsoft Office	Version 2011
Microsoft Office	Version xp sp3
Microsoft Open Xml File Format Converter	All versions

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (16)

http://secunia.com/advisories/38521

Source: secure@microsoft.com

http://secunia.com/advisories/42144

Source: secure@microsoft.com

http://www.securityfocus.com/bid/44660

Source: secure@microsoft.com

http://www.securitytracker.com/id?1024705

Source: secure@microsoft.com

http://www.us-cert.gov/cas/techalerts/TA10-313A.html

Source: secure@microsoft.com

US Government Resource

http://www.vupen.com/english/advisories/2010/2923

Source: secure@microsoft.com

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11947

Source: secure@microsoft.com

http://secunia.com/advisories/38521

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/42144

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/44660

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1024705

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA10-313A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2010/2923

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11947

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.