CVE-2010-3950

CVE-2010-3950 describes a critical memory corruption vulnerability in the TIFF image converter within Microsoft Office XP SP3, Office Converter Pack, and Works 9. This flaw allows remote attackers to execute arbitrary code or cause a denial of service by embedding a specially crafted TIFF image into an Office document. With a CVSS score of 9.3, it is a highly severe vulnerability, requiring medium attack complexity but offering complete confidentiality, integrity, and availability impact. Despite its high severity and EPSS score, there is no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this decade-old vulnerability.