Memory Corruption in Microsoft Office Products Enables Remote Code Execution

CVE-2010-3335

Summary

A vulnerability exists in various Microsoft Office products that allows remote attackers to execute arbitrary code by crafting malicious Office documents. This vulnerability arises from improper handling of specific drawing exceptions, leading to memory corruption. Successful exploitation could grant an attacker the same user rights as the logged-in user, potentially resulting in unauthorized access to sensitive information or system compromise. Users are advised to apply the necessary security updates to mitigate these risks.

References