CVE-2013-3851

Microsoft Office 2003 SP3 and 2007 SP3, Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary…

published September 11, 2013

CVSS
—
EPSS
20%
Percentile
97.5
In the wild
Unconfirmed
What it is

⚠️ A crafty Office document could send your system spiraling into chaos! This vulnerability in Microsoft Office 2003 and 2007 lets attackers execute arbitrary code at will. 🔥 Think of it like a trusted friend slipping a mysterious letter under your door. You open it, expecting a harmless message, but instead, it triggers a series of unfortunate events — like a domino effect that causes everything in your office to tip over! An attacker could take control of your system, leading to potentially devastating consequences including unauthorized access to sensitive files or a complete denial of service as your application crashes. This vulnerability could leave your environment vulnerable and make you susceptible to further attacks.

Put simply

Think of it like a trusted friend slipping a mysterious letter under your door. You open it, expecting a harmless message, but instead, it triggers a series of unfortunate events — like a domino effect that causes everything in your office to tip over! This memory corruption vulnerability allows remote attackers to execute arbitrary code or crash the application by sending a crafted Office document, effectively bypassing security measures.

What to do

An attacker could take control of your system, leading to potentially devastating consequences including unauthorized access to sensitive files or a complete denial of service as your application crashes. This vulnerability could leave your environment vulnerable and make you susceptible to further attacks. To protect yourself, ensure you're using supported versions of Microsoft Office and consider upgrading to the latest version. Regularly apply security patches and educate users to avoid opening untrusted Office documents. 🛡️ You've got this! By staying proactive and following these steps, you're on your way to securing your Office environment. 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.20145 · 97.5th percentile
Published
2013-09-11T10:00Z
EPSS history
Timeline
  • 11 SEP 10:00Z
    Microsoft Office 2003 SP3 and 2007 SP3, Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary…
    cvelistv5