CVE-2010-3947: Heap-based buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3,...

Security readout for executives and security teams

This vulnerability lets a malicious Office document containing a crafted TIFF image trigger memory corruption in Microsoft graphics filters. If successfully exploited, an attacker could run code on the victim’s machine. The source bundle names Microsoft Office XP SP3, Office Converter Pack, and Works 9. Exposure is likely limited to environments still running Office XP SP3, Office Converter Pack, or Works 9, especially where users can open untrusted Office documents. The provided affected metadata is incomplete, so confirm against Microsoft MS10-105 and local software inventory. Treat this as a high-priority legacy exposure issue, not a broad modern Office emergency based on the supplied evidence. Focus on finding and remediating old Microsoft Office-related components that may still process untrusted documents. Mitigation focus: Apply Microsoft guidance and updates from MS10-105 where applicable.; Inventory and remediate Office XP SP3, Office Converter Pack, and Works 9 installations.; Restrict opening untrusted Office documents on affected systems until remediated..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.