Buffer Overflow Vulnerability in Microsoft Office Products

CVE-2010-3951

What is CVE-2010-3951?

A buffer overflow exists in the FlashPix image converter used within Microsoft Office XP SP3 and the Office Converter Pack. This vulnerability allows attackers to execute arbitrary code by crafting a malicious FlashPix image embedded in an Office document. If successfully exploited, an attacker could gain the same user privileges as the current user, leading to unauthorized access to sensitive information or control over the affected system.

References