Lucene search
RootSSV:20246HistoryNov 17, 2010 - 12:00 a.m.
Microsoft Word RTF文件解析栈溢出漏洞(MS10-087)
2010-11-1700:00:00
Root
www.seebug.org
21
0.973 High
EPSS
Percentile
99.9%
BUGTRAQ ID: 44652
CVE ID: CVE-2010-3333
Word是微软Office套件中的文字处理工具。
在处理RTF文档中的特定控制字时Word未经执行长度检查便将其属性字符串拷贝到了栈缓冲区中，这可能触发栈溢出。成功利用此漏洞的攻击者可以完全控制受影响的系统。
Microsoft Office XP SP3
Microsoft Office for Mac 2011
Microsoft Office 2010
Microsoft Office 2008 for Mac
Microsoft Office 2007 SP2
Microsoft Office 2004 for Mac
Microsoft Office 2003 Service Pack 3
临时解决方法：
- 不要打开或保存从不受信任来源或从受信任来源意外收到的Microsoft Office文件。
厂商补丁：
Microsoft
Microsoft已经为此发布了一个安全公告（MS10-087）以及相应补丁:
MS10-087：Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2423930)
链接：http://www.microsoft.com/technet/security/bulletin/MS10-087.mspx?pf=true
Related
cisa_kev
cisa_kev
Microsoft Office Stack-based Buffer Overflow Vulnerability
2022-03-03 00:00:00
prion
prion
Stack overflow
2010-11-10 03:00:00
saint
saint
Microsoft Office RTF pFragments Property Stack Buffer Overflow
2010-11-16 00:00:00
Microsoft Office RTF pFragments Property Stack Buffer Overflow
2010-11-16 00:00:00
Microsoft Office RTF pFragments Property Stack Buffer Overflow
2010-11-16 00:00:00
attackerkb
attackerkb
CVE-2010-3333
2010-11-10 00:00:00
cve
cve
CVE-2010-3333
2010-11-10 03:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Office RTF Stack Buffer Overflow (MS10-087) - Ver2 (CVE-2010-3333)
2015-03-26 00:00:00
Microsoft Office RTF Stack Buffer Overflow (MS10-087; CVE-2010-3333)
2010-11-09 00:00:00
thn
thn
Chinese Trojans Gh0stRAT used to attack pro-Tibet organisations
2012-03-14 21:54:00
Operation Red October : Cyber Espionage campaign against many Governments
2013-01-15 10:49:00
securityvulns
securityvulns
iDefense Security Advisory 11.09.10: Microsoft Word RTF File Parsing Stack Buffer Overflow Vulnerability
2010-11-10 00:00:00
Microsoft Security Bulletin MS10-087 - Critical Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2423930)
2010-11-10 00:00:00
Microsoft Office multiple security vulnerabilities
2010-11-15 00:00:00
zdt
zdt
Office 2003 SP3, Office 2007 SP2, Office 2011 Stack-based buffer overflow
2014-01-30 00:00:00
packetstorm
packetstorm
Microsoft Word RTF pFragments Stack Buffer Overflow
2010-12-29 00:00:00
threatpost
threatpost
Facing Attacks on RTF Hole, Microsoft Urges Office Users To Patch
2011-01-04 18:05:55
China-linked APT Flew Under Radar for Decade
2022-06-17 13:34:04
Anti-Tibetan Attack Stems from Nvidia Abuse, Old RTF Vulnerability
2013-02-27 19:10:44
seebug
seebug
MS Office 2010 RTF Header Stack Overflow Vulnerability Exploit
2011-07-04 00:00:00
exploitpack
exploitpack
Microsoft Office 2010 - .RTF Header Stack Overflow
2011-07-03 00:00:00
exploitdb
exploitdb
Microsoft Office 2010 - '.RTF' Header Stack Overflow
2011-07-03 00:00:00
fireeye
fireeye
How RTF malware evades static signature-based detection
2016-05-20 14:59:00
How RTF malware evades static signature-based detection
2016-05-20 14:59:00
nessus
nessus
openvas
openvas
Microsoft Office Remote Code Execution Vulnerabilities (2423930)
2010-11-10 00:00:00
Microsoft Office Remote Code Execution Vulnerabilities (2423930)
2010-11-10 00:00:00
mskb
mskb
kitploit
kitploit
cve-search - A Tool To Perform Local Searches For Known Vulnerabilities
2017-10-17 13:30:00
n0where
n0where
Perform Local Searches For Known Vulnerabilities: cve-search
2017-10-30 00:56:57
myhack58
myhack58