← CVE Radar
CVE-2013-1331Microsoft Office Buffer Overflow Vulnerability
Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."
7.8 HIGHEPSS 79.82%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.8 | HIGH | 3.1NVD | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 9.3 | HIGH | 2.0NVD | AV:N/AC:M/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due Jun 22, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2013-1331
- Status
- Analyzed
- Assigner (CNA)
- microsoft
- Published
- Jun 12, 2013
- Last modified
- 2026-06-16 23:51 UTC
Affected Products
From NVD CPE configurations.
microsoftoffice2 version ranges
- 2003 sp3
- 2011
References
- us-cert.gov http://www.us-cert.gov/ncas/alerts/TA13-168A
- docs.microsoft.com https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-051
- oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16713
- oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16732
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-1331