CVE-2010-2572

Katalog CVE

CVSS 7.8 · High KEV · sudah dieksploitasi EPSS 58,6%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada microsoft powerpoint. Skor CVSS 3.1 7.8 (High) menurut NVD. Masuk katalog KEV CISA pada 8 Juni 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 document, aka "PowerPoint Parsing Buffer Overflow Vulnerability."

Rincian

Terbit di NVD

10 November 2010

Terakhir diubah

16 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

58,6% peluang dieksploitasi; lebih tinggi dari 99,0% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Microsoft PowerPoint Buffer Overflow Vulnerability

Masuk KEV

8 Juni 2022

Tenggat CISA

22 Juni 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-088 patch · advisory vendor
• http://www.us-cert.gov/cas/techalerts/TA10-313A.html advisory pihak ketiga · pemerintah AS
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-2572 pemerintah AS
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12195 broken link