Vulnerability Details : CVE-2010-0033
Public exploit exists!
Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka "PowerPoint Viewer TextBytesAtom Record Stack Overflow Vulnerability."
Vulnerability category: OverflowExecute code
Exploit prediction scoring system (EPSS) score for CVE-2010-0033
Probability of exploitation activity in the next 30 days: 96.69%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 100 % EPSS Score History EPSS FAQ
Metasploit modules for CVE-2010-0033
-
MS10-004 Microsoft PowerPoint Viewer TextBytesAtom Stack Buffer Overflow
Disclosure Date: 2010-02-09First seen: 2020-04-26exploit/windows/fileformat/ms10_004_textbytesatomThis module exploits a stack buffer overflow vulnerability in the handling of the TextBytesAtom records by Microsoft PowerPoint Viewer. According to Microsoft, the PowerPoint Viewer distributed with Office 2003 SP3 and earlier, as well as Office 2004 for Mac, are v
CVSS scores for CVE-2010-0033
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
9.3
|
HIGH | AV:N/AC:M/Au:N/C:C/I:C/A:C |
8.6
|
10.0
|
NIST |
CWE ids for CVE-2010-0033
-
The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2010-0033
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7711
Repository / Oval Repository
-
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-004
Microsoft Security Bulletin MS10-004 - Important | Microsoft Docs
-
http://www.us-cert.gov/cas/techalerts/TA10-040A.html
Microsoft Updates for Multiple Vulnerabilities | CISAUS Government Resource
-
http://www.securitytracker.com/id?1023563
Microsoft PowerPoint Buffer Overflows and Memory Errors Let Remote Users Execute Arbitrary Code - SecurityTracker
Products affected by CVE-2010-0033
- cpe:2.3:a:microsoft:powerpoint:2003:sp3:*:*:*:*:*:*