Detections
Analytics
MS10-079: Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (2293194)
high Nessus Plugin ID 49956
Language:
Synopsis
Arbitrary code can be executed on the remote host through Microsoft Word.Description
The remote Windows host is running a version of Microsoft Word or Word Viewer that is affected by several vulnerabilities.If an attacker can trick a user on the affected host into opening a specially crafted Word file, they could leverage this issue to execute arbitrary code subject to the user's privileges.
Solution
Microsoft has released a set of patches for Office XP, 2003, 2007, 2010, Word Viewer, Office Compatibility Pack, and Word Web Apps.See Also
Plugin Details
Severity: High
ID: 49956
File Name: smb_nt_ms10-079.nasl
Version: 1.33
Type: local
Agent: windows
Family: Windows : Microsoft Bulletins
Published: 10/13/2010
Updated: 8/5/2020
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 8.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 8.1
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:microsoft:office, cpe:/a:microsoft:office_compatibility_pack, cpe:/a:microsoft:word, cpe:/a:microsoft:word_viewer, cpe:/a:microsoft:office_web_apps
Required KB Items: SMB/MS_Bulletin_Checks/Possible
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 10/12/2010
Vulnerability Publication Date: 10/12/2010
Reference Information
CVE: CVE-2010-2747, CVE-2010-2748, CVE-2010-2750, CVE-2010-3214, CVE-2010-3215, CVE-2010-3216, CVE-2010-3217, CVE-2010-3218, CVE-2010-3219, CVE-2010-3220, CVE-2010-3221
BID: 43754, 43760, 43765, 43766, 43767, 43769, 43770, 43771, 43782, 43783, 43784