CVE-2013-1315 - Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

Back Back to CVE browser

HIGH

Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

Published Sep 11, 2013

9.3

HIGH

CVSS 2.0

EPSS 28.92%

Description

Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (6)

http://www.us-cert.gov/ncas/alerts/TA13-253A
third-party-advisoryx_refsource_CERTThird Party AdvisoryUS Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-067
vendor-advisoryx_refsource_MSPatchVendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-073
vendor-advisoryx_refsource_MSPatchVendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18333
vdb-entrysignaturex_refsource_OVALExploit
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18543
vdb-entrysignaturex_refsource_OVALVendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18950
vdb-entrysignaturex_refsource_OVALVendor Advisory

Link	Providers	Tags
http://www.us-cert.gov/ncas/alerts/TA13-253A		third-party-advisoryx_refsource_CERTThird Party AdvisoryUS Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-067		vendor-advisoryx_refsource_MSPatchVendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-073		vendor-advisoryx_refsource_MSPatchVendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18333		vdb-entrysignaturex_refsource_OVALExploit
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18543		vdb-entrysignaturex_refsource_OVALVendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18950		vdb-entrysignaturex_refsource_OVALVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Sep 11, 2013

Updated Aug 6, 2024

Reserved Jan 12, 2013

Link CVE-2013-1315

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2013-1315

Red Hat

Severity n/a

Public date n/a

Links CVE-2013-1315