Buffer overflow in Microsoft Windows 2003 Server
CVE-2010-4701
Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover Page Editor 5.2 r2 in Windows XP Professional SP3, Server 2003 R2 Enterprise Edition SP2, and Windows 7 Professional allows remote attackers to execute arbitrary code via a long record in a Fax Cover Page (.cov) file. NOTE: some of these details are obtained from third party information.
Vulnerability class: Buffer Overflow
EPSS: 0.478 (98.7th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Windows_2003_server
- Microsoft Windows_7
- Microsoft Windows_xp
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (US Government Resource, x_refsource_CERT, third-party-advisory)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (signature, x_refsource_OVAL, vdb-entry)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (Exploit, exploit, x_refsource_EXPLOIT-DB)