CVE-2010-1900
35Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 40%
from disclosure to weapon31 days
Published on NVDAug 11
1st PoC+31d
exploitation probability
40%top 2% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Works 9 do not properly handle malformed records in a Word file, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, aka "Word Record Parsing Vulnerability."
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/14971⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.