high7.8Known exploited
CVE-2013-1331
Microsoft Office Buffer Overflow Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-06-08. Federal due date: 2022-06-22.
Apply updates per vendor instructions.
Impact
Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Office | Versions 2003, 2011 |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- http://www.us-cert.gov/ncas/alerts/TA13-168A
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-051
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16713
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16732
- http://www.us-cert.gov/ncas/alerts/TA13-168A
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-051
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16713
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16732
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-1331