CVE-2010-4701: Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Se...

Security readout for executives and security teams

CVE-2010-4701 is a memory corruption flaw in Microsoft Windows Fax Services Cover Page Editor. A crafted Fax Cover Page (.cov) file with an overly long record could cause code execution on affected Windows systems. The source bundle does not show active exploitation, but it includes a public exploit reference, so legacy systems deserve attention. Exposure is most likely on legacy Windows endpoints or servers where Fax Services Cover Page Editor is installed or available and users can receive or open .cov files. Modern unsupported or unpatched systems are the main concern. The provided affected-product data is incomplete beyond the named Windows editions. Treat this as a legacy-system risk with high impact but unclear current exploitation. Prioritize if XP, Server 2003, or Windows 7 systems still process user-supplied files. Unsupported systems should be isolated, patched where possible, or retired. Mitigation focus: Identify and prioritize legacy Windows systems with Fax Cover Page Editor exposure.; Apply relevant Microsoft security updates or vendor guidance where available.; Restrict handling of untrusted .cov files on affected systems..

Prepared

Jun 27, 2026, 18:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.