cyfenced.com →

[ CVE-2013-1331 · Published 12 Jun 2013 ]

Microsoft Office Buffer Overflow Vulnerability

Exploited · CISA KEV CVSS 7.8 EPSS 80%Fix available

[ Why it matters ]Priority signals

  • Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2022-06-08
  • EPSS: 80% chance of exploitation in the next 30 days (higher than 100% of CVEs)

[ Description ]Official description

Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."

CISA: Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via crafted PNG data in an Office document.

[ Fixes ]Fixes and patches

CISA required action (US federal deadline 22 Jun 2022): Apply updates per vendor instructions.

[ References ]References