CVE-2013-3850

Microsoft Word 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Word Viewer allow remote attackers to execute arbitrary code or…

published September 11, 2013

CVSS
—
EPSS
20%
Percentile
97.4
In the wild
Unconfirmed
What it is

⚠️ A crafty document could crash your entire system! In older versions of Microsoft Word, a sneaky crafted file can exploit memory corruption to execute arbitrary code. 😱 Think of it as a waiter taking your order but mistaking a spicy dish for a mild one — instead of a harmless meal, it serves up something dangerous that can affect everything in the kitchen! If an attacker sends a malicious document, they could potentially execute code remotely, leading to unauthorized access or even a complete system crash. This could disrupt productivity and compromise sensitive information.

Put simply

Think of it as a waiter taking your order but mistaking a spicy dish for a mild one — instead of a harmless meal, it serves up something dangerous that can affect everything in the kitchen! This vulnerability in Microsoft Word allows attackers to manipulate memory handling, triggering crashes or executing arbitrary code when a user opens a specially crafted Office document.

What to do

If an attacker sends a malicious document, they could potentially execute code remotely, leading to unauthorized access or even a complete system crash. This could disrupt productivity and compromise sensitive information. To safeguard your systems, update to the latest version of Microsoft Office and disable macros in your settings. Regularly educate users on the risks of opening unknown documents. You've got this! Stay vigilant and keep your software updated for a more secure experience. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.20043 · 97.4th percentile
Published
2013-09-11T10:00Z
EPSS history
Timeline
  • 11 SEP 10:00Z
    Microsoft Word 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Word Viewer allow remote attackers to execute arbitrary code or…
    cvelistv5