CVE-2010-3333

This exploit generates a malicious Microsoft Office 2010 document that, when opened, downloads and executes a remote executable. It leverages a vulnerability in MS Office 2010 to achieve remote code execution (RCE).

This exploit targets a buffer overflow vulnerability in Microsoft Office 2003 (CVE-2010-3333) via a maliciously crafted RTF file. It leverages a shellcode payload to achieve remote code execution, tested on Windows XP SP1/2/3.

This exploit demonstrates a stack overflow vulnerability in MS Office 2010 RTF parsing, bypassing DEP/ASLR via ROP chains to achieve arbitrary code execution (calc.exe). It leverages HeapCreate() to allocate an executable heap and copies shellcode from the stack to this heap for execution.

This Metasploit module exploits a stack-based buffer overflow in Microsoft Word's RTF parser via the 'pFragments' shape property. It generates a malicious RTF file that triggers the vulnerability, leading to remote code execution on vulnerable systems.

This repository provides a detailed technical analysis of CVE-2010-3333, an RTF stack overflow vulnerability in Microsoft Office. It includes root cause analysis, patch details, and a walkthrough of the exploit mechanism, focusing on the incorrect handling of the 'pFragments' attribute in RTF files.

This Metasploit module exploits a stack-based buffer overflow in Microsoft Word's RTF parser via the 'pFragments' shape property. It targets multiple versions of Microsoft Office (2002, 2003, 2007) on various Windows platforms, using SEH overwrites and carefully crafted RTF files to achieve remote code execution.