CVE-2010-3227

Stack-based buffer overflow in the UpdateFrameTitleForDocument method in the CFrameWnd class in mfc42.dll in the Microsoft Foundation Class (MFC) Library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows context-dependent attackers to execute arbitrary code via a long window title that this library attempts to create at the request of an application, as demonstrated by the Trident PowerZip 7.2 Build 4010 application, aka "Windows MFC Document Title Updating Buffer Overflow Vulnerability."

• CWE-119

• http://www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2010/20100705-%281%29
• http://www.exploit-db.com/exploits/13921/Exploit, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1024557Third Party Advisory, VDB Entry
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-074
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6696Third Party Advisory
• http://www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2010/20100705-%281%29
• http://www.exploit-db.com/exploits/13921/Exploit, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1024557Third Party Advisory, VDB Entry
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-074
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6696Third Party Advisory

Published

Oct 26, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-3221Microsoft Word 2002 SP3 and 2003 SP3, Office 2004 for Mac, a…
• CVE-2010-3222Stack-based buffer overflow in the Remote Procedure Call Sub…
• CVE-2010-3223The user interface in Microsoft Cluster Service (MSCS) in Mi…
• CVE-2010-3224Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-3225Use-after-free vulnerability in the Media Player Network Sha…
• CVE-2010-3226Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2010-3228The JIT compiler in Microsoft .NET Framework 4.0 on 64-bit p…
• CVE-2010-3229The Secure Channel (aka SChannel) security package in Micros…
• CVE-2010-3230Integer overflow in Microsoft Excel 2002 SP3 allows remote a…
• CVE-2010-3231Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and …
• CVE-2010-3232Microsoft Excel 2003 SP3 and 2007 SP2; Office 2004 and 2008 …
• CVE-2010-3233Microsoft Excel 2002 SP3 and 2003 SP3 does not properly vali…