CVE-2013-1331

Katalog CVE

CVSS 7.8 · High KEV · sudah dieksploitasi EPSS 79,8%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada microsoft office. Skor CVSS 3.1 7.8 (High) menurut NVD. Masuk katalog KEV CISA pada 8 Juni 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."

Rincian

Terbit di NVD

12 Juni 2013

Terakhir diubah

16 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

79,8% peluang dieksploitasi; lebih tinggi dari 99,6% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Microsoft Office Buffer Overflow Vulnerability

Masuk KEV

8 Juni 2022

Tenggat CISA

22 Juni 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-051 patch · advisory vendor
• http://www.us-cert.gov/ncas/alerts/TA13-168A advisory pihak ketiga · pemerintah AS
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-1331 pemerintah AS
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16713 broken link
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16732 broken link