---
id: "CVE-2010-3333"
kind: "vulnerability"
aliases: ["CVE-2010-3333"]
title: "Microsoft Office: Microsoft Office Stack-based Buffer Overflow Vulnerability"
severity: "critical"
cvss: 9.3
epss: 0.89389
exploited: true
status: "open"
category: "package"
products: [{"name": "Microsoft Office", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "microsoft-office", "package", "windows"]
not_affected_if: ["no-rtf-handling", "patched-office"]
published_at: "2010-11-10T03:00:02+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T21:57:35+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-3333", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2010-3333", "first_seen_at": "2026-10-23T19:13:44+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3333", "first_seen_at": "2026-10-23T21:57:35+00:00"}]
---

# Microsoft Office: Microsoft Office Stack-based Buffer Overflow Vulnerability

Microsoft Office has a stack-based buffer overflow in how it parses RTF files. An attacker who gets a user to open a crafted RTF document can run code on that machine.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Microsoft Office affected ? fixed ?

## Fix

Apply the Microsoft security update for this CVE per vendor instructions, as CISA requires; the specific KB or patched build is not in the sources.

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-3333
- 2026-10-23T19:13:44+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2010-3333
- 2026-10-23T21:57:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2010-3333

## From the sources

Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via crafted RTF data, aka "RTF Stack Buffer Overflow Vulnerability."

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_