Secunia Research: Microsoft Office TIFF Image Converter Endian Conversion Vulnerability

====================================================================== Secunia Research 14/12/2010 - Microsoft Office TIFF Image Converter - - Endian Conversion Vulnerability - ====================================================================== Table of Contents Affected...

CVE-2010-3949

CVE-2010-3949 affects Microsoft Office XP SP3 and the Office Converter Pack, via a buffer overflow in the TIFF Image Converter (TIFFIM32.FLT) used by the graphics filters. The vulnerability arises when converting TIFF data endianness, allowing a crafted TIFF image in an Office document to trigger...