High severity · published Jun 12, 2013
CVE-2013-1331
Microsoft Office Buffer Overflow Vulnerability
In wildKEV
7.8
CVSS
79.8%
EPSS
Yes
On KEV
Description
Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)79.8% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Jun 8, 2022
Federal remediation dueJun 22, 2022
Ransomware campaign useNot known
Affected products
Which versions
OF
Office · Microsoft
2003; 2011 · source: NVD, KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-1331
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-1331
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
vdb-entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16713
third-party-advisory
http://www.us-cert.gov/ncas/alerts/TA13-168A
vdb-entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16732
vendor-advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-051
More from Office
9.8
CVE-2024-21413
Microsoft Outlook Remote Code Execution Vulnerability
9.8
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
8.8
CVE-2024-38189
Microsoft Project Remote Code Execution Vulnerability
8.8
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
8.8
CVE-2019-1297
Microsoft Excel Remote Code Execution Vulnerability