{"id":"CVE-2010-3336","published":"2010-11-10T01:00:00Z","modified":"2024-08-07T03:03:18Z","title":"Microsoft Office XP SP3, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"Microsoft Office XP SP3, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka \"MSO Large SPID Read AV Vulnerability.\"","provenance":"source","from":"CVE.org"},"summary":{"text":"Microsoft Office XP SP3, Office 2004 and 2008 for Mac, Office for Mac 2011, and the Open XML File Format Converter for Mac contain a memory corruption flaw in the MSO component, known as the \"MSO Large SPID Read AV Vulnerability.\" An attacker who supplies a crafted Office document can trigger the memory corruption and execute arbitrary code on the target system.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:16:03Z"},"cvss":null,"epss":{"score":0.23915,"percentile":0.97826,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2021-08-17","exploitedFirstSeen":"2021-08-17","ransomware":false,"evidence":[{"url":"https://dl.acm.org/doi/pdf/10.1145/3465481.3465758","date":"2021-08-17"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":{"pulseCount":1,"pulses":[{"name":"CVE -CVE Reference Map for Source MS - Curios RE active candidates CVE version 20061101","url":"https://otx.alienvault.com/pulse/679c3446de4f362fac9217f9","created":"2025-01-31"}],"provenance":"machine"},"cwes":[],"references":[{"url":"http://www.securitytracker.com/id?1024705","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://secunia.com/advisories/42144","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11947","tags":["vdb-entry","signature","x_refsource_OVAL"]},{"url":"http://www.securityfocus.com/bid/44660","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://secunia.com/advisories/38521","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2010/2923","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087","tags":["vendor-advisory","x_refsource_MS"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-313A.html","tags":["third-party-advisory","x_refsource_CERT"]}],"techniques":[],"reports":[{"id":"SRC-93c55e10ab45afc37c85","title":"Microsoft Security","publisher":"download.microsoft.com","url":"https://download.microsoft.com/download/E/B/0/EB0F50CC-989C-4B66-B7F6-68CD3DC90DE3/Microsoft_Security_Intelligence_Report_Volume_21_English.pdf","date":null,"mentions":[{"quote":" CVE-2010-3336 is a memory corruption vulnerability in several older","start":111628,"end":111697},{"quote":"CVE-2010-3336","start":112238,"end":112251},{"quote":"CVE-2010-3336, 62","start":261197,"end":261214}]},{"id":"SRC-619721166ae9d9d7fdcd","title":"Microsoft Security","publisher":"download.microsoft.com","url":"https://download.microsoft.com/download/4/4/C/44CDEF0E-7924-4787-A56A-16261691ACE3/Microsoft_Security_Intelligence_Report_Volume_19_English.pdf","date":null,"mentions":[{"quote":"CVE-2010-3336","start":92510,"end":92523},{"quote":"CVE-2010-3336, 52","start":238015,"end":238032}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2010-3334","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-3334","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2010-11-10","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2010-3336","provenance":"source"},{"date":"2021-08-17","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://dl.acm.org/doi/pdf/10.1145/3465481.3465758","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":61.4,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 1899 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.57,"detail":"percentile 0.9783"},{"name":"Named in threat reports","points":6.13,"detail":"2 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.68,"detail":"1 pulse"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}