CVE-2010-3952

CVE-2010-3952 describes a critical heap memory corruption vulnerability in the FlashPix image converter within Microsoft Office XP SP3 and Office Converter Pack. This flaw allows remote attackers to execute arbitrary code or trigger a denial of service by embedding a specially crafted FlashPix image into an Office document. With a CVSS score of 9.3, it represents a high-severity risk, requiring medium attack complexity but potentially leading to complete compromise of confidentiality, integrity, and availability. Despite its age and high risk score, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.