TIFF Image Converter Memory Corruption Vulnerability (CVE-2010-3950)
Severity: CRITICAL
CVE Identifier: CVE-2010-3950
Advisory Date: JUL 21, 2015
DESCRIPTION
The TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 does not properly convert data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted TIFF image in an Office document, aka "TIFF Image Converter Memory Corruption Vulnerability."
TREND MICRO PROTECTION INFORMATION
Apply associated Trend Micro DPI Rules.
SOLUTION
Trend Micro Deep Security DPI Rule Number: 1004543
Trend Micro Deep Security DPI Rule Name: 1004543 - TIFF Image Converter Buffer Overflow Vulnerability