CVE-2013-1331

HIGHCISA KEV

7.8

Description

Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."

Details CVE

Score CVSS v3.17.8

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vecteur d'attaqueLOCAL

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurREQUIRED

Publie6/12/2013

Derniere modification4/22/2026

Sourcekev

Observations honeypot0

CISA KEV

FournisseurMicrosoft

ProduitOffice

Nom vulnerabiliteMicrosoft Office Buffer Overflow Vulnerability

Date ajout KEV2022-06-08

Date limite remediation2022-06-22

Utilise dans ransomwareUnknown

Produits affectes

microsoft:office

Faiblesses (CWE)

CWE-120CWE-120

References

http://www.us-cert.gov/ncas/alerts/TA13-168A(secure@microsoft.com)

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-051(secure@microsoft.com)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16713(secure@microsoft.com)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16732(secure@microsoft.com)

http://www.us-cert.gov/ncas/alerts/TA13-168A(af854a3a-2127-422b-91ae-364da2661108)

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-051(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16713(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16732(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-1331(134c704f-9b21-4f2e-91b3-4a467353bcc0)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.