{"id":"CVE-2010-3333","kind":"vulnerability","aliases":["CVE-2010-3333"],"related":[],"title":"Microsoft Office: Microsoft Office Stack-based Buffer Overflow Vulnerability","description":"Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via crafted RTF data, aka \"RTF Stack Buffer Overflow Vulnerability.\"","summary":"Microsoft Office has a stack-based buffer overflow in how it parses RTF files. An attacker who gets a user to open a crafted RTF document can run code on that machine.","severity":"critical","cvss":9.3,"epss":0.89389,"exploited":true,"exploited_at":"2022-03-03T00:00:00+00:00","products":[{"name":"Microsoft Office","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","microsoft-office","package","windows"],"not_affected_if":["no-rtf-handling","patched-office"],"how_to_check":null,"fix":"Apply the Microsoft security update for this CVE per vendor instructions, as CISA requires; the specific KB or patched build is not in the sources.","status":"open","published_at":"2010-11-10T03:00:02+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:26:26+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"package","confidence":0.7,"triage":{"at":"2026-10-23T21:26:26Z","model":"claude-haiku-5-5","output":{"fix":"Apply the Microsoft security update for this CVE per vendor instructions, as CISA requires; the specific KB or patched build is not in the sources.","reach":"unknown","impact":"high","summary":"Microsoft Office has a stack-based buffer overflow in how it parses RTF files. An attacker who gets a user to open a crafted RTF document can run code on that machine.","category":"package","who_cares":["microsoft-office","windows"],"confidence":0.7,"needs_auth":"no","worst_case":"Attacker runs arbitrary code on the user's machine via a crafted RTF file.","analyst_note":"Find the Microsoft security bulletin (MS10-087) and the list of affected and fixed Office builds; the sources do not give versions or a check method.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["patched-office","no-rtf-handling"],"user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000454,"input_tokens":2835,"output_tokens":341,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2010':12A,15A '-3333':13A,16A '2003':69C '2004':77C '2007':72C '2008':79C '2010':75C '2011':85C 'aka':105C 'allow':94C 'arbitrari':99C 'attack':41B,96C 'base':7A,31B,60C 'buffer':8A,32B,61C,108C 'code':54B,100C 'convert':91C 'craft':49B,102C 'cve':11A,14A 'data':104C 'document':51B 'execut':98C 'exploit':19B 'file':39B,89C 'format':90C 'get':43B 'mac':81C,84C,93C 'machin':57B 'microsoft':1A,3A,17A,21B,25B,64C 'microsoft-offic':20B 'offic':2A,4A,22B,26B,65C,68C,71C,74C,76C,82C 'office':18A 'open':47B,87C 'overflow':9A,33B,62C,109C 'packag':23B 'pars':37B 'remot':95C 'rtf':38B,50B,103C,106C 'run':53B 'sp2':73C 'sp3':67C,70C 'stack':6A,30B,59C,107C 'stack-bas':5A,29B,58C 'user':45B 'via':101C 'vulner':10A,110C 'window':24B 'xml':88C 'xp':66C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2010-11-10T03:00:02+00:00","kev":{"dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2010-3333","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-3333","severity":null,"published_at":"2022-03-03T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T13:39:32+00:00","note":null},{"source":"epss","external_id":"CVE-2010-3333","url":"https://api.first.org/data/v1/epss?cve=CVE-2010-3333","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2010-3333","url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3333","severity":null,"published_at":"2010-11-10T03:00:02+00:00","modified_at":"2026-06-16T23:22:36+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}