CyberSec.Space Logo
CVEブラウザに戻る

CVE-2013-3847

CRITICAL
9.3
CVSS Severity Score
EPSS Score0.1830%
EPSS Percentile41.80th
Published2013年9月11日
Last Modified2026年4月29日

Vulnerability Description

Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3848, CVE-2013-3849, and CVE-2013-3858.

Affected Platforms (CPE)

📦
Microsoft

Sharepoint Foundation

= 2010
📦
Microsoft

Sharepoint Foundation

= 2010
📦
Microsoft

Sharepoint Portal Server

= 2003
📦
Microsoft

Sharepoint Server

= 2010
📦
Microsoft

Sharepoint Server

= 2010
📦
Microsoft

Sharepoint Services

= 2.0
📦
Microsoft

Sharepoint Services

= 3.0
📦
Microsoft

Office Web Apps

= 2010
📦
Microsoft

Office Compatibility Pack

All versions
📦
Microsoft

Word

= 2003
📦
Microsoft

Word

= 2007
📦
Microsoft

Word

= 2010
📦
Microsoft

Word Viewer

All versions

References & Advisories

関連する脆弱性情報