Heap-Based Buffer Overflow in Microsoft Office Products

CVE-2010-3947

Summary

A heap-based buffer overflow exists in the TIFF image converter used by Microsoft Office XP SP3, Office Converter Pack, and Microsoft Works 9. This vulnerability allows remote attackers to exploit crafted TIFF images included in Office documents, potentially resulting in arbitrary code execution on the victim's machine. Attackers can leverage this flaw to manipulate system behavior or gain unauthorized access to sensitive information.

References