VulnerabilityAnalyzed

CVE-2010-3333

Microsoft Office Stack-based Buffer Overflow Vulnerability

KEVEXPLOIT ×4 ✓HIGH 7.8EPSS 89.4%

Does this matter?

Known to be exploited in the wild (CISA KEV, CISA remediation deadline 24 March 2022). Treat as an emergency change: patch or isolate now, then hunt for prior compromise.

Description

Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via crafted RTF data, aka "RTF Stack Buffer Overflow Vulnerability."

CVSS 3.1: 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS: 89.39% probability · 100th percentile
Public exploits: 4 in Exploit-DB · verified · first 4 March 2011
CISA KEV: Listed 3 March 2022 · due 24 March 2022
Weakness: CWE-787
Affected: microsoft/office · microsoft/open xml file format converter
Source: secure@microsoft.com

EPSS trend

EPSS 89.4% since 26 October 2026; no change recorded yet. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

CISA notes

Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2010-3333

Public exploits (4)

Entries in Exploit-DB that cite this CVE. Links go to the Exploit-DB page and to the file in the public repository; nothing is hosted here. A verified tick means the Exploit-DB team confirmed the exploit works against the stated version.

EDB-ID	Title	Type	Published	Verified
EDB-24526 source ↗	Microsoft Office 2010 - Download Executewindows · g11tch	remote	20 February 2013	yes
EDB-18334 source ↗	Microsoft Office 2003 Home/Pro - Code Execution (MS10-087)windows · b33f & g11tch	local	8 January 2012	yes
EDB-17474 source ↗	Microsoft Office 2010 - '.RTF' Header Stack Overflowwindows · Snake	local	3 July 2011	yes
EDB-16686 source ↗	Microsoft Word - '.RTF' pFragments Stack Buffer Overflow (File Format) (MS10-087) (Metasploit)windows · Metasploit	local	4 March 2011	yes

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=880Broken Link
http://secunia.com/advisories/38521Broken Link
http://secunia.com/advisories/42144Broken Link
http://securityreason.com/securityalert/8293Broken Link
http://www.securityfocus.com/bid/44652Broken Link, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1024705Broken Link, Third Party Advisory, VDB Entry
http://www.us-cert.gov/cas/techalerts/TA10-313A.htmlThird Party Advisory, US Government Resource
http://www.vupen.com/english/advisories/2010/2923Broken Link
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087Patch, Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11931Broken Link
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=880Broken Link
http://secunia.com/advisories/38521Broken Link
http://secunia.com/advisories/42144Broken Link
http://securityreason.com/securityalert/8293Broken Link
http://www.securityfocus.com/bid/44652Broken Link, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1024705Broken Link, Third Party Advisory, VDB Entry
http://www.us-cert.gov/cas/techalerts/TA10-313A.htmlThird Party Advisory, US Government Resource
http://www.vupen.com/english/advisories/2010/2923Broken Link
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087Patch, Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11931Broken Link
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3333US Government Resource

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.