Integer Overflow Vulnerability in Microsoft Publisher 2003
CVE-2013-1317

Currently unrated

Key Information:

Vendor

Microsoft

Status
Vendor
CVE Published:
15 May 2013

What is CVE-2013-1317?

An integer overflow vulnerability exists in Microsoft Publisher 2003 SP3, which can be exploited by remote attackers through specially crafted Publisher files. When a malicious file is opened, it leads to an improper allocation-size calculation, which may allow execution of arbitrary code. Users are encouraged to update their software to prevent potential exploitation.

References

EPSS Score

65% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.