CVE-2013-1327 - Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper memory allocation, aka "Publisher Signed Integer Vulnerability."

Back Back to CVE browser

HIGH

Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper memory allocation, aka "Publisher Signed Integer Vulnerability."

Published May 15, 2013

9.3

HIGH

CVSS 2.0

EPSS 20.77%

Description

Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper memory allocation, aka "Publisher Signed Integer Vulnerability."

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-189

References (3)

http://www.us-cert.gov/ncas/alerts/TA13-134A
third-party-advisoryx_refsource_CERTUS Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-042
vendor-advisoryx_refsource_MS
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16355
vdb-entrysignaturex_refsource_OVAL

Link	Providers	Tags
http://www.us-cert.gov/ncas/alerts/TA13-134A		third-party-advisoryx_refsource_CERTUS Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-042		vendor-advisoryx_refsource_MS
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16355		vdb-entrysignaturex_refsource_OVAL

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published May 15, 2013

Updated Aug 6, 2024

Reserved Jan 12, 2013

Link CVE-2013-1327

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2013-1327

Red Hat

Severity n/a

Public date n/a

Links CVE-2013-1327