CVE-2010-2572
high-risk
Published 2010-11-10
Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 document, aka "PowerPoint Parsing Buffer Overflow Vulnerability."
Do I need to act?
!
74.7% chance of exploitation in next 30 days
EPSS score — higher than 25% of all CVEs
!
CISA KEV: actively exploited in the wild
On the Known Exploited Vulnerabilities catalog — federal agencies must patch
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.8/10
High
LOCAL
/ LOW complexity
Affected Products (2)
Affected Vendors
References (7)
Third Party Advisory
http://www.us-cert.gov/cas/techalerts/TA10-313A.html
Third Party Advisory
http://www.us-cert.gov/cas/techalerts/TA10-313A.html
57
/ 100
high-risk
Severity
24/34 · High
Exploitability
26/34 · High
Exposure
7/34 · Low