CyberSec.Space Logo
Back to CVE Browser

CVE-2013-1331

Known Exploited (CISA KEV)HIGH
7.8
CVSS Severity Score
EPSS Score41.2910%
EPSS Percentile87.46th
PublishedJun 12, 2013
Last ModifiedApr 22, 2026

Vulnerability Description

Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."

Affected Platforms (CPE)

📦
Microsoft

Office

= 2003
📦
Microsoft

Office

= 2011

References & Advisories

🔗 http://www.us-cert.gov/ncas/alerts/TA13-168A
🔗 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-051
🔗 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16713
🔗 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16732
🔗 http://www.us-cert.gov/ncas/alerts/TA13-168A
🔗 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-051
🔗 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16713
🔗 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16732

Related Vulnerabilities

CVE-2001-122310.0

The web administration server for ELSA Lancom 1100 Office does not require authentication, which allows arbitrary remote attackers...

CVE-2001-126010.0

Avaya Argent Office uses weak encryption (trivial encoding) for passwords, which allows remote attackers to gain administrator pri...

CVE-2000-085410.0

When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.d...

CVE-2007-111710.0

Unspecified vulnerability in Publisher 2007 in Microsoft Office 2007 allows remote attackers to execute arbitrary code via unspeci...