CVE-2010-3951

CVE-2010-3951 describes a critical buffer overflow vulnerability within the FlashPix image converter affecting Microsoft Office XP SP3 and Office Converter Pack. This flaw allows remote attackers to execute arbitrary code by embedding a specially crafted FlashPix image into an Office document. With a CVSS score of 9.3, it presents a high risk due to its network-based attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its severity and high FAUCET Risk Score, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion, and it is not listed in CISA's KEV catalog.