CVE-2013-3890

Microsoft Excel 2007 SP3, Excel Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka…

published October 9, 2013

CVSS
—
EPSS
20%
Percentile
97.4
In the wild
Unconfirmed
What it is

⚠️ A crafty Office document could be your undoing! This vulnerability in Microsoft Excel 2007 SP3, Excel Viewer, and Office Compatibility Pack SP3 allows attackers to execute arbitrary code without breaking a sweat. 😱 Think of it like a sneaky delivery that arrives at your doorstep disguised as an important package — once opened, it unleashes chaos inside your home without you even realizing it! 📦 If exploited, attackers could run malicious code on your system, potentially compromising your data, stealing sensitive information, or even turning your computer into part of a botnet! The impact could be absolutely devastating if you're dealing with sensitive or confidential information.

Put simply

Think of it like a sneaky delivery that arrives at your doorstep disguised as an important package — once opened, it unleashes chaos inside your home without you even realizing it! 📦 This vulnerability occurs due to memory corruption within Excel, allowing an attacker to craft a specially designed Office document that triggers the flaw when opened, enabling them to execute arbitrary code on the affected system.

What to do

If exploited, attackers could run malicious code on your system, potentially compromising your data, stealing sensitive information, or even turning your computer into part of a botnet! The impact could be absolutely devastating if you're dealing with sensitive or confidential information. Ensure you update to the latest versions or patches provided by Microsoft for Excel 2007, Excel Viewer, and the Office Compatibility Pack. Additionally, exercise caution when opening documents from unknown sources to mitigate potential risks. You've got this! With a quick update and some vigilance, you can keep your system safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.20022 · 97.4th percentile
Published
2013-10-09T14:44Z
EPSS history
Timeline
  • 09 OCT 14:44Z
    Microsoft Excel 2007 SP3, Excel Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka…
    cvelistv5