CVE-2010-4701

CVE-2010-4701 describes a heap-based buffer overflow in the CDrawPoly::Serialize function within the Microsoft Windows Fax Services Cover Page Editor (fxscover.exe). This vulnerability affects Windows XP Professional SP3, Server 2003 R2 Enterprise Edition SP2, and Windows 7 Professional. An attacker can exploit this by crafting a malicious Fax Cover Page (.cov) file containing a long record, leading to remote code execution. The vulnerability has a CVSS score of 7.6, indicating high severity due to its network-based attack vector and high impact on confidentiality, integrity, and availability, despite requiring high attack complexity. Its FAUCET Risk Score is 98/100, further emphasizing its critical nature. While not listed in CISA's KEV catalog, an exploit (EDB-15839) is publicly available on ExploitDB. There is no evidence of active exploitation, and community discussion and media coverage for this CVE are minimal.