Unscored CVE-2010-3217 EUVD-2010-3216GHSA-26qm-jcfr-w44c

Double free vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a Word document with crafted Lis…

Published Oct 13, 2010 · Updated Aug 7, 2024 · Assigned by microsoft

Description

Double free vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a Word document with crafted List Format Override (LFO) records, aka "Word Pointer Vulnerability."

References

oval:org.mitre.oval:def:6695 vdb-entry signature
20101014 VUPEN Security Research - Microsoft Office Word Document Invalid Pointer Vulnerability (CVE-2010-3217) mailing-list
http://secunia.com/secunia_research/2010-76/
MS10-079 vendor-advisory
20101223 Secunia Research: Microsoft Word LFO Parsing Double-Free Vulnerability mailing-list
TA10-285A third-party-advisory