PT-2010-5187
CVE-2010-3950
·
Publicado
2010-12-16
·
Atualizado
2018-10-12
Descrição por
CVSS 2.0
9.3
AltaMétricasAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Microsoft Office XP SP3
Office Converter Pack
Works 9
Description
The issue is related to the TIFF image converter in the graphics filters, which does not properly convert data. This allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted TIFF image in an Office document.
Recommendations
For Microsoft Office XP SP3, update the TIFF image converter to a patched version.
For Office Converter Pack, apply the necessary patch to fix the memory corruption issue.
For Works 9, install the latest update that addresses the TIFF image converter problem.
As a temporary workaround, consider avoiding the use of TIFF images in Office documents until a patch is available.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾