CVE-2013-1315

CWE-119 — Buffer Overflow3 documents3 sources

Severity

9.3CRITICAL

EPSS

73.7%

top 1.19%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Microsoft Excel Microsoft Office Microsoft Office WEB Apps +4 more

Timeline

PublishedSep 11

Latest updateMay 14

Description

Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages7 packages

▶NVDmicrosoft/office_web_apps2010

▶NVDmicrosoft/office2011

▶NVDmicrosoft/excel4 versions+3

▶NVDmicrosoft/sharepoint_server2007, 2010+1

▶NVDmicrosoft/sharepoint_services2.0, 3.0+1

Patches

Patch: docs.microsoft.com ↗Patch: docs.microsoft.com ↗Patch: docs.microsoft.com ↗

🔴Vulnerability Details

GHSA

GHSA-4hhx-gmqj-x5qp: Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT;↗2022-05-14

▶

CVEList

CVE-2013-1315: Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT;↗2013-09-11

▶