VULNERABILITY INTELLIGENCE
CVE-2013-1331
CVSS score7.8 HIGH
EPSS probability79.82%
CISA KEVKnown exploited vulnerability
Published2013-06-12
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Known Exploited Vulnerability
Microsoft Office Buffer Overflow Vulnerability
Vendor / product: Microsoft / Office
Description
Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."
Weakness classification
- CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Primary references
- secure@microsoft.com — Third Party Advisory, US Government Resource
- secure@microsoft.com — Patch, Vendor Advisory
- secure@microsoft.com — Broken Link
- secure@microsoft.com — Broken Link
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource