CVE-2010-3954: Buffer Overflow
Published Dec 16, 2010
·Updated
Microsoft Publisher 2002 SP3, 2003 SP3, and 2010 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Publisher file, aka "Microsoft Publisher Memory Corruption Vulnerability."
Affected Software
3 affected components
Microsoft Publisher=2010
Microsoft Publisher=2002-sp3
Microsoft Publisher=2003-sp3
Event History
Dec 16, 2010
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-3954?
CVE-2010-3954 has a high severity rating due to its potential for remote code execution.
2
How do I fix CVE-2010-3954?
To fix CVE-2010-3954, ensure that you have installed the latest security updates for Microsoft Publisher.
3
What versions of Microsoft Publisher are affected by CVE-2010-3954?
CVE-2010-3954 affects Microsoft Publisher 2002 SP3, 2003 SP3, and 2010.
4
What type of attack does CVE-2010-3954 enable?
CVE-2010-3954 enables remote attackers to execute arbitrary code or cause a denial of service.
5
Can I mitigate the risks associated with CVE-2010-3954?
To mitigate risks associated with CVE-2010-3954, avoid opening untrusted Publisher files and apply security patches promptly.