CVE-2013-1331 | BDVDB-2026-56126 Detail
MicrosoftOffice
Description#
Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: local.
Weaknesses#
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
References#
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16713
- http://www.us-cert.gov/ncas/alerts/TA13-168A
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16732
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-051
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-1331
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.