CVE-2013-1331
High 7.8 Exploited in the wild (KEV)
Confirmed active exploitation — CISA KEV catalog
- Name
- Microsoft Office Buffer Overflow Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- Apply updates per vendor instructions.
Description
Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."
Metrics
- CVSS 3.1
-
7.8 (HIGH)
Score source: NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 80% (percentile: 100) as of 1 November 2026
- CWE
- CWE-120
Affected products
microsoft: office
References
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-0… PatchVendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-0… PatchVendor Advisory
- http://www.us-cert.gov/ncas/alerts/TA13-168A Third Party AdvisoryUS Government Resource
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%… Broken Link
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%… Broken Link
- http://www.us-cert.gov/ncas/alerts/TA13-168A Third Party AdvisoryUS Government Resource
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%… Broken Link
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%… Broken Link
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013… US Government Resource