CVE-2010-3217

Double free vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a Word document with crafted List Format Override (LFO) records, aka "Word Pointer Vulnerability."

• CWE-399

• http://secunia.com/secunia_research/2010-76/Vendor Advisory
• http://www.securityfocus.com/archive/1/514298/100/0/threaded
• http://www.securityfocus.com/archive/1/515440/100/0/threaded
• http://www.us-cert.gov/cas/techalerts/TA10-285A.htmlUS Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-079
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6695
• http://secunia.com/secunia_research/2010-76/Vendor Advisory
• http://www.securityfocus.com/archive/1/514298/100/0/threaded
• http://www.securityfocus.com/archive/1/515440/100/0/threaded
• http://www.us-cert.gov/cas/techalerts/TA10-285A.htmlUS Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-079
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6695

Published

Oct 13, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-3211Multiple SQL injection vulnerabilities in the JE FAQ Pro (co…
• CVE-2010-3212SQL injection vulnerability in index.php in Seagull 0.6.7 an…
• CVE-2010-3213Cross-site request forgery (CSRF) vulnerability in Microsoft…
• CVE-2010-3214Stack-based buffer overflow in Microsoft Word 2002 SP3, 2003…
• CVE-2010-3215Microsoft Word 2002 SP3 and Office 2004 for Mac do not prope…
• CVE-2010-3216Microsoft Word 2002 SP3 and Office 2004 for Mac allow remote…
• CVE-2010-3218Heap-based buffer overflow in Microsoft Word 2002 SP3 allows…
• CVE-2010-3219Array index vulnerability in Microsoft Word 2002 SP3 allows …
• CVE-2010-3220Unspecified vulnerability in Microsoft Word 2002 SP3 and Off…
• CVE-2010-3221Microsoft Word 2002 SP3 and 2003 SP3, Office 2004 for Mac, a…
• CVE-2010-3222Stack-based buffer overflow in the Remote Procedure Call Sub…
• CVE-2010-3223The user interface in Microsoft Cluster Service (MSCS) in Mi…