CVE-2010-3955

CVE-2010-3955 is a critical array indexing memory corruption vulnerability in Microsoft Publisher 2002 SP3's pubconv.dll, allowing remote attackers to execute arbitrary code through specially crafted Publisher files using older formats. With a CVSS score of 9.3, it presents a high-severity threat with network-based attacks, medium complexity, and complete compromise of confidentiality, integrity, and availability. Despite its age and high risk score, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.