CyberSec.Space Logo
CVEブラウザに戻る

CVE-2013-1331

Known Exploited (CISA KEV)HIGH
7.8
CVSS Severity Score
EPSS Score41.2910%
EPSS Percentile87.46th
Published2013年6月12日
Last Modified2026年4月22日

Vulnerability Description

Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."

Affected Platforms (CPE)

📦
Microsoft

Office

= 2003
📦
Microsoft

Office

= 2011

References & Advisories

🔗 http://www.us-cert.gov/ncas/alerts/TA13-168A
🔗 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-051
🔗 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16713
🔗 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16732
🔗 http://www.us-cert.gov/ncas/alerts/TA13-168A
🔗 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-051
🔗 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16713
🔗 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16732

関連する脆弱性情報

CVE-2001-122310.0

The web administration server for ELSA Lancom 1100 Office does not require authentication, which allows arbitrary remote attackers...

CVE-2001-126010.0

Avaya Argent Office uses weak encryption (trivial encoding) for passwords, which allows remote attackers to gain administrator pri...

CVE-2000-085410.0

When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.d...

CVE-2007-111710.0

Unspecified vulnerability in Publisher 2007 in Microsoft Office 2007 allows remote attackers to execute arbitrary code via unspeci...