CVEvulnerability

CVE-2013-1331

7.8 HIGH Known exploited Published 2013-06-12 Modified 2026-06-16 Official page ↗

CISA Known Exploited Vulnerability

Microsoft Office Buffer Overflow Vulnerability — Microsoft Office

Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via crafted PNG data in an Office document.

Added to KEV: 2022-06-08
Remediation due: 2022-06-22
Ransomware use: Unknown
Required action: Apply updates per vendor instructions.
Notes: https://nvd.nist.gov/vuln/detail/CVE-2013-1331

Status: Analyzed
Published: 2013-06-12
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses: CWE-120

Description

Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."

Affected configurations

• microsoft office 2003 • microsoft office 2011

Weakness · CWE (1)

CWE-120 Buffer Copy without Checking Size of Input weakness

References