CVE-2010-3951: Buffer overflow in the FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Offi...

Security readout for executives and security teams

This vulnerability affects legacy Microsoft Office components that process FlashPix images. A malicious Office document could trigger memory corruption and allow attacker-controlled code to run. The business concern is mainly legacy exposure: old Office XP SP3 or Office Converter Pack systems handling untrusted documents. Exposure is likely limited to organizations still running Microsoft Office XP SP3 or Office Converter Pack, especially where users open external Office documents. The bundle does not identify newer affected products. Treat this as a high-priority legacy risk if affected Office components remain in use. If the organization has fully retired Office XP and Office Converter Pack, urgency is lower but should be verified through inventory. Mitigation focus: Review Microsoft MS10-105 and apply the vendor security update where applicable.; Inventory systems for Microsoft Office XP SP3 and Office Converter Pack.; Retire or isolate legacy Office installations that cannot be updated..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.