VULNERABILITY INTELLIGENCE
CVE-2013-1317
CVSS score9.3 HIGH
EPSS probability20.87%
CISA KEVNot currently listed
Published2013-05-15
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Integer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper allocation-size calculation, aka "Publisher Integer Overflow Vulnerability."
Weakness classification
- CWE-190: Integer Overflow or Wraparound
Primary references
- secure@microsoft.com — Third Party Advisory, US Government Resource
- secure@microsoft.com
- secure@microsoft.com
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108