Patch Tuesday, November 2010
Microsoft's monthly security release, Tuesday, November 9, 2010. Includes CVEs published within two days either side; Adobe and SAP ride the same day.
2 CVEs · 0 critical · 2 exploited · 1 with public exploit code
Microsoft only. Adobe and SAP are below. Exploited first, then public exploit code, then highest CVSS.
Microsoft
2 CVEs · 0 critical · 2 exploited · 1 with public exploit code
- 7.8HighNov 10, 2010Microsoft Office Memory corruptionCVE-2010-3333A stack-based buffer overflow vulnerability exists in the parsing of RTF data in Microsoft Office and earlier allows an attacker to perform remote code execution.Exploited89% likelyExploit codeExploit-DB · Metasploit
- 7.8HighNov 10, 2010Microsoft PowerPoint Memory corruptionCVE-2010-2572Microsoft PowerPoint contains a buffer overflow vulnerability that alllows for remote code execution.Exploited59% likely
Adobe
No tracked Adobe CVEs in this window.
SAP
No tracked SAP CVEs in this window.
The release date follows Microsoft's usual schedule (second Tuesday). Chips show what Watch Floor knows: CISA KEV listing, public exploit code and published detection rules.