CVE-2013-1331
high-risk
Published 2013-06-12
Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."
Do I need to act?
!
88.9% chance of exploitation in next 30 days
EPSS score — higher than 11% of all CVEs
!
CISA KEV: actively exploited in the wild
On the Known Exploited Vulnerabilities catalog — federal agencies must patch
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.8/10
High
LOCAL
/ LOW complexity
Affected Vendors
References (9)
Third Party Advisory
http://www.us-cert.gov/ncas/alerts/TA13-168A
Third Party Advisory
http://www.us-cert.gov/ncas/alerts/TA13-168A
58
/ 100
high-risk
Severity
24/34 · High
Exploitability
27/34 · High
Exposure
7/34 · Low