{"id":"CVE-2013-1331","kind":"vulnerability","aliases":["CVE-2013-1331"],"related":[],"title":"Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary…","description":"Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka \"Office Buffer Overflow Vulnerability.\"","summary":"Microsoft Office has a buffer overflow triggered by crafted PNG image data embedded in an Office document. An attacker who gets a user to open the document can run code on that user's machine.","severity":"critical","cvss":9.3,"epss":0.79822,"exploited":true,"exploited_at":"2022-06-08T00:00:00+00:00","products":[{"name":"Microsoft Office","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"microsoft office","fixed":[],"affected":"= 2003","ecosystem":"vendor"},{"name":"microsoft office","fixed":[],"affected":"= 2011","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","microsoft-office","package","windows"],"not_affected_if":["patched-office"],"how_to_check":null,"fix":"Apply Microsoft's security updates for Office per vendor instructions, as CISA requires; the specific bulletin and affected builds are not given in the sources.","status":"open","published_at":"2013-06-12T03:29:57+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:12:37+00:00","updated_at":"2026-10-23T22:29:04+00:00","category":"package","confidence":0.7,"triage":{"at":"2026-10-23T21:12:37Z","model":"claude-haiku-5-5","output":{"fix":"Apply Microsoft's security updates for Office per vendor instructions, as CISA requires; the specific bulletin and affected builds are not given in the sources.","reach":"internet","impact":"high","summary":"Microsoft Office has a buffer overflow triggered by crafted PNG image data embedded in an Office document. An attacker who gets a user to open the document can run code on that user's machine.","category":"package","who_cares":["microsoft-office","windows"],"confidence":0.7,"needs_auth":"no","worst_case":"Attacker runs code on the user's machine via a crafted document","analyst_note":"Find the Microsoft bulletin for CVE-2013-1331 and the affected/fixed Office builds; the sources give no versions. KEV listing is at cisa.gov known-exploited-vulnerabilities-catalog.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["patched-office"],"user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.00046,"input_tokens":2822,"output_tokens":355,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-1331':21A,24A '-2013':20A,23A '2003':6A,77C '2011':10A,81C 'aka':104C 'alloc':103C 'allow':13A,84C 'arbitrari':18A,89C 'attack':15A,55B,86C 'buffer':1A,41B,72C,106C 'code':66B,90C 'craft':45B,92C 'cve':19A,22A 'data':48B,94C 'document':53B,63B,98C 'embed':49B 'execut':17A,88C 'exploit':31B 'get':57B 'imag':47B 'improp':101C 'lead':99C 'mac':12A,83C 'machin':71B 'memori':102C 'microsoft':4A,25A,27A,29A,33B,37B,75C 'microsoft-offic':32B 'offic':5A,9A,34B,38B,52B,76C,80C,97C,105C 'office':26A,28A,30A 'open':61B 'overflow':2A,42B,73C,107C 'packag':35B 'png':46B,93C 'remot':14A,85C 'run':65B 'sp3':7A,78C 'trigger':43B 'user':59B,69B 'via':91C 'vulner':108C 'window':36B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2013-06-12T03:29:57+00:00","kev":{"dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2013-1331","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-1331","severity":null,"published_at":"2022-06-08T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T10:39:06+00:00","note":null},{"source":"epss","external_id":"CVE-2013-1331","url":"https://api.first.org/data/v1/epss?cve=CVE-2013-1331","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:45+00:00","fetched_at":"2026-10-23T19:13:45+00:00","note":null},{"source":"nvd","external_id":"CVE-2013-1331","url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1331","severity":null,"published_at":"2013-06-12T03:29:57+00:00","modified_at":"2026-06-16T23:51:13+00:00","first_seen_at":"2026-10-23T22:29:04+00:00","fetched_at":"2026-10-23T22:29:04+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}