CVE-2010-3336

EXPLOITED

Microsoft Office XP SP3, Office 2004/2008/2011 for Mac - Remote Code Execution via Crafted Document

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2010-3336 has been observed exploited in the wild (reported by VulnCheck KEV).

Description

Microsoft Office XP SP3, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "MSO Large SPID Read AV Vulnerability."

References (8)

Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1024705
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/42144
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11947
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/44660
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/38521
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/2923
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA10-313A.html

Scores

EPSS 0.2392
EPSS Percentile 97.6%

Details

VulnCheck KEV 2021-08-17
CWE
CWE-119
Status published
Products (5)
microsoft/office 2004
microsoft/office 2008
microsoft/office 2011
microsoft/office xp sp3
microsoft/open_xml_file_format_converter
Published Nov 10, 2010
Tracked Since Feb 18, 2026