CVE-2013-1331
Microsoft Office Buffer Overflow Vulnerability
Published Jun 11, 2013 · updated Jun 16, 2026 · microsoft office
Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."
Timeline
Detection, updates, and resolution for this record.
Jun 11, 2013 · Catalog
Detected
Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."
Jun 8, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Jun 22, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."
Required action
Apply updates per vendor instructions.
CISA due date Jun 22, 2022
Affected
- cpe microsoft/office2003
- cpe microsoft/office2011
- vendor Microsoft Officeversion unspecified
Sources
- CISA KEVCVE-2013-1331
Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via crafted PNG data in an Office document.
cisa.gov - CVE.orgCVE-2013-1331
Official CVE identifier
cve.org - FIRST EPSSCVE-2013-1331
30-day exploitation probability 79.8%
first.org - NIST NVDCVE-2013-1331
Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."
nvd.nist.gov