What is the severity of CVE-2013-3849?

CVE-2013-3849 is rated as critical due to its potential to allow remote attackers to execute arbitrary code or cause a denial of service.

How do I fix CVE-2013-3849?

To mitigate CVE-2013-3849, apply the appropriate security updates released by Microsoft for the affected versions of software.

What versions of Microsoft products are affected by CVE-2013-3849?

CVE-2013-3849 affects Microsoft Word 2003, 2007, 2010, Office Compatibility Pack SP3, Word Viewer, and SharePoint Server 2010 SP1 among others.

What are the potential impacts of CVE-2013-3849?

Exploitation of CVE-2013-3849 could lead to arbitrary code execution or a denial of service due to memory corruption.

Is there a workaround for CVE-2013-3849?

While the best defense is to apply patches, users can also consider restricting access to vulnerable services as a temporary measure.

Vulnerability/
CVE-2013-3849

critical

9.3

CWE

119

11/9/2013

6/8/2024

CVE-2013-3849: Buffer Overflow

First published: Wed Sep 11 2013(Updated: )

Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3847, CVE-2013-3848, and CVE-2013-3858.

Credit: secure@microsoft.com

Affected Software	Affected Version	How to fix
Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint	=sp3
Microsoft Word for Android	=2003-sp3
Microsoft Word for Android	=2007-sp3
Microsoft Word for Android	=2010-sp1
Microsoft Word for Android	=2010-sp1
Microsoft Word Viewer
Microsoft SharePoint Server	=2010-sp1
Microsoft Office Web Apps	=2010-sp1

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2013-3849?
CVE-2013-3849 is rated as critical due to its potential to allow remote attackers to execute arbitrary code or cause a denial of service.
How do I fix CVE-2013-3849?
To mitigate CVE-2013-3849, apply the appropriate security updates released by Microsoft for the affected versions of software.
What versions of Microsoft products are affected by CVE-2013-3849?
CVE-2013-3849 affects Microsoft Word 2003, 2007, 2010, Office Compatibility Pack SP3, Word Viewer, and SharePoint Server 2010 SP1 among others.
What are the potential impacts of CVE-2013-3849?
Exploitation of CVE-2013-3849 could lead to arbitrary code execution or a denial of service due to memory corruption.
Is there a workaround for CVE-2013-3849?
While the best defense is to apply patches, users can also consider restricting access to vulnerable services as a temporary measure.

agent/type
collector/mitre-cve
source/MITRE
agent/author
agent/weakness
agent/last-modified-date
agent/severity
agent/references
agent/description
agent/event
agent/first-publish-date
agent/source
agent/softwarecombine
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/microsoft
canonical/microsoft office compatibility pack for word, excel, and powerpoint
version/microsoft office compatibility pack for word, excel, and powerpoint/sp3
canonical/microsoft word for android
version/microsoft word for android/2003-sp3
version/microsoft word for android/2007-sp3
version/microsoft word for android/2010-sp1
canonical/microsoft word viewer
canonical/microsoft sharepoint server
version/microsoft sharepoint server/2010-sp1
canonical/microsoft office web apps
version/microsoft office web apps/2010-sp1

Frequently Asked Questions

What is the severity of CVE-2013-3849?
CVE-2013-3849 is rated as critical due to its potential to allow remote attackers to execute arbitrary code or cause a denial of service.
How do I fix CVE-2013-3849?
To mitigate CVE-2013-3849, apply the appropriate security updates released by Microsoft for the affected versions of software.
What versions of Microsoft products are affected by CVE-2013-3849?
CVE-2013-3849 affects Microsoft Word 2003, 2007, 2010, Office Compatibility Pack SP3, Word Viewer, and SharePoint Server 2010 SP1 among others.
What are the potential impacts of CVE-2013-3849?
Exploitation of CVE-2013-3849 could lead to arbitrary code execution or a denial of service due to memory corruption.
Is there a workaround for CVE-2013-3849?
While the best defense is to apply patches, users can also consider restricting access to vulnerable services as a temporary measure.

CVE-2013-3849: Buffer Overflow

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2013-3849?

How do I fix CVE-2013-3849?

What versions of Microsoft products are affected by CVE-2013-3849?

What are the potential impacts of CVE-2013-3849?

Is there a workaround for CVE-2013-3849?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2013-3849?

How do I fix CVE-2013-3849?

What versions of Microsoft products are affected by CVE-2013-3849?

What are the potential impacts of CVE-2013-3849?

Is there a workaround for CVE-2013-3849?