Arbitrary Code Execution Vulnerability in Microsoft Publisher 2003 SP3
CVE-2013-1322

Currently unrated

Key Information:

Vendor

Microsoft
Status
Publisher
Vendor
CVE Published:
15 May 2013

What is CVE-2013-1322?

An issue in Microsoft Publisher 2003 SP3 related to improper validation of table range data allows remote attackers to execute arbitrary code by crafting malicious Publisher files. This vulnerability highlights significant security risks associated with handling unverified document formats, making it crucial for users to ensure proper security measures and updates are in place.

References

http://www.us-cert.gov/ncas/alerts/TA13-134A
third-party-advisoryx_refsource_CERT
https://oval.cisecurity.org/repository/search/definition/...
vdb-entrysignaturex_refsource_OVAL
https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS

EPSS Score

59% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.