Trusted Design

• 重大度: Unknown
• 公開日: 2010-11-10
• 更新日: 2025-10-22

概要

Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via crafted RTF data, aka "RTF Stack Buffer Overflow Vulnerability."

このCVEに関連するMITRE ATT&CKテクニック

• T1583.007 - Serverless
• T1583.002 - DNS Server
• T1114.001 - Local Email Collection
• T1121 - Regsvcs/Regasm
• T1559.002 - Dynamic Data Exchange
• T1204.002 - Malicious File
• T1070.002 - Clear Linux or Mac System Logs
• T1598.003 - Spearphishing Link
• T1583.005 - Botnet
• T1071 - Application Layer Protocol
• T1608.001 - Upload Malware
• T1190 - Exploit Public-Facing Application
• T1558 - Steal or Forge Kerberos Tickets
• T1518.002 - Backup Software Discovery
• T1218.003 - CMSTP
• T1525 - Implant Internal Image
• T1145 - Private Keys
• T1155 - AppleScript
• T1042 - Change Default File Association
• T1055.013 - Process Doppelgänging
• T1546.008 - Accessibility Features
• T1083 - File and Directory Discovery
• T1649 - Steal or Forge Authentication Certificates
• T1051 - Shared Webroot
• T1584.005 - Botnet
• T1552.001 - Credentials In Files
• T1218.005 - Mshta
• T1021.007 - Cloud Services
• T1071.002 - File Transfer Protocols
• T1534 - Internal Spearphishing
• T1219.003 - Remote Access Hardware
• T1601 - Modify System Image
• T1110.004 - Credential Stuffing
• T1187 - Forced Authentication
• T1486 - Data Encrypted for Impact
• T1203 - Exploitation for Client Execution
• T1595.003 - Wordlist Scanning
• T1499 - Endpoint Denial of Service
• T1027.004 - Compile After Delivery
• T1065 - Uncommonly Used Port
• T1500 - Compile After Delivery
• T1213.003 - Code Repositories
• T1565.002 - Transmitted Data Manipulation
• T1543.001 - Launch Agent
• T1555.004 - Windows Credential Manager
• T1221 - Template Injection
• T1159 - Launch Agent
• T1564.005 - Hidden File System
• T1046 - Network Service Discovery
• T1055.008 - Ptrace System Calls
• T1653 - Power Settings
• T1220 - XSL Script Processing
• T1173 - Dynamic Data Exchange
• T1204.001 - Malicious Link

このCVEが関連しているPulses

このCVEが関連しているPulsesはありません。

CVEの関係性グラフ

---

← CVE一覧に戻る