CVE-2013-1331: Microsoft Office Buffer Overflow Vulnerability

CVE-2013-1331 · Severity: critical · CVSS 7.8 · Exploited in the wild · Published 2022-06-08

Technologies: Microsoft Office. Vendors: Microsoft.

Executive brief

A buffer overflow vulnerability in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code. The flaw is triggered by improper memory allocation when processing crafted PNG data within an Office document.

Affected products

Microsoft Office 2003 SP3
Microsoft Office 2011 for Mac

Timeline

2013-06-11: disclosed: NVD Published Date
2013-06-11: advisory: Microsoft Security Bulletin MS13-051 released
2022-06-08: kev added: Added to CISA Known Exploited Vulnerabilities Catalog
2022-06-08: exploited: Reported as exploited in the wild per CISA KEV entry date.

Related threats

Microsoft Office use of uninitialized resource
Microsoft Office out-of-bounds read information disclosure
Microsoft Office heap-based buffer overflow
Microsoft Office out-of-bounds read
Microsoft Office out-of-bounds read