EXPOSURES › CVE-2010-3333
CVE-2010-3333
HIGH ⌖ ON CISA KEV · EXPLOITEDA stack-based buffer overflow in Microsoft Office's RTF parser allowed remote code execution, and it was actively exploited in the wild.
An unpatched vulnerability in Microsoft Office allowed attackers to execute arbitrary code remotely by exploiting a buffer overflow during RTF data parsing. DIB organizations must ensure all Office applications are patched and monitored for exploitation attempts, as this flaw was actively weaponized despite being known since 2010.
Shame score — A known, unpatched vulnerability was actively exploited in the wild for years, demonstrating severe negligence in patch management and vulnerability handling.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
A stack-based buffer overflow vulnerability exists in the parsing of RTF data in Microsoft Office and earlier allows an attacker to perform remote code execution.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |