NVD

Id
14641  
Name
CVE-2010-3227  
Description
Stack-based buffer overflow in the UpdateFrameTitleForDocument method in the CFrameWnd class in mfc42.dll in the Microsoft Foundation Class (MFC) Library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows context-dependent attackers to execute arbitrary code via a long window title that this library attempts to create at the request of an application, as demonstrated by the Trident PowerZip 7.2 Build 4010 application, aka "Windows MFC Document Title Updating Buffer Overflow Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-10-26  
Modified Date
2011-07-18  
Seq
2010-3227  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
81121 14641 CVE-2010-3227 oval:org.mitre.oval:def:6696  View
81122 14641 CVE-2010-3227 http://www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2010/20100705-(1)  View
81123 14641 CVE-2010-3227 13921  View
81124 14641 CVE-2010-3227 MS10-074  View
81125 14641 CVE-2010-3227 1024557  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36432 JVNDB-2010-002212 複数の Microsoft 製品の UpdateFrameTitleForDocument メソッドにおけるスタックベースのバッファオーバーフローの脆弱性 複数の Microsoft 製品の Microsoft Foundation Class (MFC) Library の mfc42.dll 内にある CFrameWnd クラスの UpdateFrameTitleForDocument メソッドには、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2010-3227 45807 CVE-2010-3227 14641 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002212.html 2010-10-12 2010-10-29 View