Junglewise Threat Intelligence

CVE-2010-2572: Microsoft PowerPoint Buffer Overflow Vulnerability

CVE-2010-2572 · Severity: critical · CVSS 9.3 · Exploited in the wild · Published 2022-06-08

Executive brief

A buffer overflow vulnerability in Microsoft PowerPoint 2002 and 2003 allows remote attackers to execute arbitrary code via a specially crafted PowerPoint 95 document. The flaw stems from improper parsing of legacy document formats.

Affected products

  • Microsoft PowerPoint 2002 SP3
  • Microsoft PowerPoint 2003 SP3

Timeline

  • 2010-11-09: disclosed: NVD Published Date
  • 2010-11-09: patched: Microsoft released security bulletin MS10-088
  • 2022-06-08: kev added: Added to CISA Known Exploited Vulnerabilities Catalog
  • 2022-06-08: exploited: Confirmed exploited in the wild per CISA KEV entry

Related threats