CVE-2013-1335

Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code via crafted shape data in a Word document, aka "Word Shape Corruption…

published May 15, 2013

CVSS
—
EPSS
21%
Percentile
97.6
In the wild
Unconfirmed
What it is

⚠️ A seemingly innocent Word document could be your digital Achilles' heel! Attackers can exploit crafted shape data to run arbitrary code — it’s like a sneaky delivery person slipping in a package with a hidden bomb! 💣 Picture a mailroom that accepts any package without checking the label. If someone sneaks in a dangerous delivery disguised as an innocuous one, once it’s opened, chaos ensues! That’s what happens when Microsoft Word 2003 or the Word Viewer processes malicious shape data. An attacker could execute any code they want on your system, potentially leading to data theft, unauthorized access, or even total control over your machine. The implications could be severe, especially if sensitive documents are involved.

Put simply

Picture a mailroom that accepts any package without checking the label. If someone sneaks in a dangerous delivery disguised as an innocuous one, once it’s opened, chaos ensues! That’s what happens when Microsoft Word 2003 or the Word Viewer processes malicious shape data. This vulnerability arises from a lack of proper validation of shape data in Word documents, allowing remote attackers to inject and execute malicious code when the document is opened.

What to do

An attacker could execute any code they want on your system, potentially leading to data theft, unauthorized access, or even total control over your machine. The implications could be severe, especially if sensitive documents are involved. To protect yourself, it's crucial to update your Microsoft Word 2003 to the latest version or consider upgrading to a newer release that isn’t affected by this vulnerability. Also, be cautious when opening documents from unknown sources. You've got this! Stay vigilant and follow these steps to keep your systems safe. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.20933 · 97.6th percentile
Published
2013-05-15T01:00Z
EPSS history
Timeline
  • 15 MAY 01:00Z
    Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code via crafted shape data in a Word document, aka "Word Shape Corruption…
    cvelistv5