CVE-2013-3159: Input Validation
Microsoft Excel 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Excel Viewer; and Microsoft Office Compatibility Pack SP3 allow remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka "XML External Entities Resolution Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-3159?
CVE-2013-3159 has a severity rating of 'Important' as it allows remote attackers to access arbitrary files.
How do I fix CVE-2013-3159?
To fix CVE-2013-3159, apply the latest security updates provided by Microsoft for the affected versions of Excel.
What versions of Microsoft Excel are affected by CVE-2013-3159?
CVE-2013-3159 affects Microsoft Excel versions 2003 SP3, 2007 SP3, 2010 SP1, and 2010 SP2, along with Excel Viewer and the Office Compatibility Pack SP3.
Can CVE-2013-3159 be exploited remotely?
Yes, CVE-2013-3159 can be exploited remotely by attackers through crafted XML documents.
What kind of vulnerabilities does CVE-2013-3159 relate to?
CVE-2013-3159 is associated with XML External Entity (XXE) vulnerabilities, which can lead to information disclosure.