CVE-2013-3852

Microsoft Word 2003 SP3, 2007 SP3, and 2010 SP1; Office Compatibility Pack SP3; and Word Viewer allow remote attackers to execute arbitrary code or cause a…

published September 11, 2013

CVSS
—
EPSS
20%
Percentile
97.4
In the wild
Unconfirmed
What it is

⚠️ A crafted Office document can unleash chaos in Microsoft Word! This vulnerability allows remote attackers to execute arbitrary code or cause a denial of service. 😱 Think of it like a restaurant serving meals with surprise ingredients that nobody ordered — one bad dish can spoil the whole dining experience. Here, an unsuspecting user opening a malicious file can lead to disastrous consequences. An attacker could potentially gain control over the victim’s system, executing harmful commands or causing crashes. This could mean anything from stealing data to cascading failures that impact productivity — absolutely devastating!

Put simply

Think of it like a restaurant serving meals with surprise ingredients that nobody ordered — one bad dish can spoil the whole dining experience. Here, an unsuspecting user opening a malicious file can lead to disastrous consequences. This memory corruption vulnerability in Microsoft Word allows attackers to execute arbitrary code via specially crafted Office documents, leading to potential remote code execution or denial of service.

What to do

An attacker could potentially gain control over the victim’s system, executing harmful commands or causing crashes. This could mean anything from stealing data to cascading failures that impact productivity — absolutely devastating! To protect yourself, ensure that your Microsoft Office installations (2003, 2007, 2010) are updated with the latest patches. Be cautious with email attachments and avoid opening documents from untrusted sources. You've got this! Follow these steps, and you'll keep your system safe from harm. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.20043 · 97.4th percentile
Published
2013-09-11T10:00Z
EPSS history
Timeline
  • 11 SEP 10:00Z
    Microsoft Word 2003 SP3, 2007 SP3, and 2010 SP1; Office Compatibility Pack SP3; and Word Viewer allow remote attackers to execute arbitrary code or cause a…
    cvelistv5