CVE-2013-1331

HIGHCISA KEV

7.8

Description

Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."

CVE Details

CVSS v3.1 Score7.8

SeverityHIGH

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredNONE

User InteractionREQUIRED

Published6/12/2013

Last Modified4/22/2026

Sourcekev

Honeypot Sightings0

CISA KEV

VendorMicrosoft

ProductOffice

Vulnerability NameMicrosoft Office Buffer Overflow Vulnerability

KEV Date Added2022-06-08

Remediation Due Date2022-06-22

Ransomware UseUnknown

Affected Products

microsoft:office

Weaknesses (CWE)

CWE-120CWE-120

References

http://www.us-cert.gov/ncas/alerts/TA13-168A(secure@microsoft.com)

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-051(secure@microsoft.com)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16713(secure@microsoft.com)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16732(secure@microsoft.com)

http://www.us-cert.gov/ncas/alerts/TA13-168A(af854a3a-2127-422b-91ae-364da2661108)

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-051(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16713(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16732(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-1331(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.