CVE-2013-1331KEV · OVERDUE

Microsoft Office Buffer Overflow Vulnerability

High · published June 12, 2013

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 99.6th percentile for exploit probability.

1584
days past CISA
deadline
CVSS v3.1
7.8
EPSS
80%
Percentile
99.6
In the wild
Confirmed
What it is

🚨 A crafted PNG image is all it takes to unleash chaos in Office 2003 and Office 2011 for Mac! 🔥 Think of it like a dinner invitation where the host doesn't check the food allergies of guests. One wrong dish (or image) could lead to a disastrous meal, leaving the whole party in chaos! An attacker could exploit this vulnerability to execute arbitrary code on a victim's machine, leading to potential data theft, system compromise, or even full control over the affected device. It's absolutely devastating — someone could turn your document into a Pandora’s box of trouble!

Put simply

Think of it like a dinner invitation where the host doesn't check the food allergies of guests. One wrong dish (or image) could lead to a disastrous meal, leaving the whole party in chaos! This buffer overflow vulnerability occurs due to improper handling of PNG data within Office documents, allowing an attacker to manipulate memory allocation and execute malicious code. Essentially, it opens the door for attackers to insert harmful commands into seemingly harmless files.

What to do

An attacker could exploit this vulnerability to execute arbitrary code on a victim's machine, leading to potential data theft, system compromise, or even full control over the affected device. It's absolutely devastating — someone could turn your document into a Pandora’s box of trouble! To secure your system, upgrade to a newer version of Microsoft Office that doesn't include this flaw. Additionally, consider implementing strict security measures regarding document handling, including using antivirus software to scan attachments. Regularly update your software to ensure that vulnerabilities are patched. 🛡️ You've got this! With these steps, you'll be back in the safety zone in no time! 🌟

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.79822 · 99.6th percentile
Published
2013-06-12T01:00Z
KEV added
2022-06-08 · due 2022-06-22
EPSS history
Timeline
  • 08 JUN 00:00Z
    Added to CISA KEV — remediate by Jun 22
    kev
  • 12 JUN 01:00Z
    Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office…
    cvelistv5