Vulnerability Intelligence Report
Microsoft Office Buffer Overflow Vulnerability
CVE-2013-1331
Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."
CISA KEV
SSVC: Active Exploitation
CVSS Base Score
7.8
HIGH
Exploitability:1.9
Impact Score:5.9
EPSS Probability:81.88%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-120 ↗CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| microsoft | office | 2003, 2011 |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Microsoft Corporation · Vendor · USA |
| Reserved | 2013-01-12T00:00:00 |
| Published | 2013-06-12T01:00:00 |
| Patch Date | 2013-06-11 |
| Last Updated | 2025-10-22T00:05:41 |
Community Chatter & Buzz