MSO Large SPID Read AV Vulnerability (CVE-2010-3336)

  Severity: CRITICAL
  CVE Identifier: CVE-2010-3336
  Advisory Date: JUL 21, 2015

  DESCRIPTION

Microsoft Office XP SP3, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "MSO Large SPID Read AV Vulnerability."

  TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1004500
  Trend Micro Deep Security DPI Rule Name: 1004500 - MSO Large SPID Read AV Vulnerability (CVE-2010-3336)

  AFFECTED SOFTWARE AND VERSION

  • Microsoft Office 2004
  • Microsoft Office 2008
  • Microsoft Office 2011
  • Microsoft Office XP
  • Microsoft Open XML File Format Converter