CVE-2013-1335: Code Injection
Published May 15, 2013
·Updated
Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code via crafted shape data in a Word document, aka "Word Shape Corruption Vulnerability."
Affected Software
2 affected components
Microsoft Word=2003-sp3
Microsoft Word Viewer
Event History
May 15, 2013
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-1335?
CVE-2013-1335 is rated as critical due to its potential to allow remote code execution.
2
How do I fix CVE-2013-1335?
To mitigate CVE-2013-1335, users should apply the security update provided by Microsoft.
3
Who is affected by CVE-2013-1335?
CVE-2013-1335 impacts users of Microsoft Word 2003 SP3 and Microsoft Word Viewer.
4
What kind of attacks can exploit CVE-2013-1335?
CVE-2013-1335 can be exploited by attackers through crafted Word documents that contain malicious shape data.
5
When was CVE-2013-1335 publicly disclosed?
CVE-2013-1335 was publicly disclosed in April 2013 as part of a Microsoft security update.