CVE-2013-1324

2013-11-1300:55:02

CWE-119

[email protected]

web.nvd.nist.gov

microsoft office

buffer overflow

remote code execution

wordperfect

cve-2013-1324

7.9 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.931 High

EPSS

Percentile

99.1%

JSON

Stack-based buffer overflow in Microsoft Office 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT allows remote attackers to execute arbitrary code via a crafted WordPerfect document (.wpd) file, aka “Word Stack Buffer Overwrite Vulnerability.”

Affected configurations

NVD

Node

microsoftofficeMatch2003sp3

microsoftofficeMatch2007sp3

microsoftofficeMatch2010sp1x64

microsoftofficeMatch2010sp1x86

microsoftofficeMatch2013----x64

microsoftofficeMatch2013----x86

microsoftoffice_2013_rtMatch-

CPENameOperatorVersion
microsoft:officemicrosoft officeeq2003
microsoft:officemicrosoft officeeq2007
microsoft:officemicrosoft officeeq2010
microsoft:officemicrosoft officeeq2013
microsoft:office_2013_rtmicrosoft office 2013 rteq-

CPE	Name	Operator	Version
microsoft:office	microsoft office	eq	2003
microsoft:office	microsoft office	eq	2007
microsoft:office	microsoft office	eq	2010
microsoft:office	microsoft office	eq	2013
microsoft:office_2013_rt	microsoft office 2013 rt	eq	-