CVE-2013-1331

high

Description

Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."

References

Advisories
More

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-051

http://www.us-cert.gov/ncas/alerts/TA13-168A

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-1331

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16732

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16713

Details

Source: Mitre, NVD

Published: 2013-06-12

Updated: 2026-06-16

Known Exploited Vulnerability (KEV)

Risk Information

CVSS v2

Base Score: 9.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H