Microsoft Office CVE-2010-3333

Apply Microsoft Security Bulletin MS10-087 immediately, available at https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-087, which provides specific patches for each affected Office version. Given the age of these products (2003-2010), Microsoft mainstream support has ended, making migration to modern, supported Office versions (Office 2016 or later, preferably Office 365/Microsoft 365) the preferred long-term solution. As interim compensating controls: configure email gateways to block or quarantine RTF file attachments (.rtf extension), which eliminates the primary delivery vector but may disrupt legitimate business workflows requiring RTF document exchange; enable Office Protected View for files from untrusted sources, though this feature is only available in Office 2010 and provides defense-in-depth rather than complete protection; restrict user permissions to prevent code execution at elevated privileges, limiting post-exploitation impact but not preventing initial compromise. Deploy endpoint detection and response (EDR) solutions configured to detect stack-based buffer overflow exploitation attempts and suspicious Office child processes. Note that organizations still running Office 2003-2010 likely face compliance and security posture issues beyond this single CVE.