CVE-2013-1315

2013-09-1114:03:00

CWE-119

[email protected]

web.nvd.nist.gov

105

cve-2013-1315

microsoft sharepoint server

office web apps

excel

office for mac

excel viewer

office compatibility pack

memory corruption

remote code execution

denial of service

nvd

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.815 High

EPSS

Percentile

98.3%

JSON

Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka “Microsoft Office Memory Corruption Vulnerability.”

CPENameOperatorVersion
microsoft:excel_viewermicrosoft excel viewereq*
microsoft:excelmicrosoft exceleq2013
microsoft:office_compatibility_packmicrosoft office compatibility packeq*
microsoft:excelmicrosoft exceleq2003
microsoft:officemicrosoft officeeq2011
microsoft:sharepoint_foundationmicrosoft sharepoint foundationeq2010
microsoft:excelmicrosoft exceleq2010
microsoft:excelmicrosoft exceleq2007
microsoft:sharepoint_servicesmicrosoft sharepoint serviceseq3.0
microsoft:sharepoint_servermicrosoft sharepoint servereq2007

CPE	Name	Operator	Version
microsoft:excel_viewer	microsoft excel viewer	eq	*
microsoft:excel	microsoft excel	eq	2013
microsoft:office_compatibility_pack	microsoft office compatibility pack	eq	*
microsoft:excel	microsoft excel	eq	2003
microsoft:office	microsoft office	eq	2011
microsoft:sharepoint_foundation	microsoft sharepoint foundation	eq	2010
microsoft:excel	microsoft excel	eq	2010
microsoft:excel	microsoft excel	eq	2007
microsoft:sharepoint_services	microsoft sharepoint services	eq	3.0
microsoft:sharepoint_server	microsoft sharepoint server	eq	2007