CVE-2013-3889: Buffer Overflow
Microsoft Excel 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; Office Compatibility Pack SP3; and Excel Services and Word Automation Services in SharePoint Server 2013 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Excel Memory Corruption Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-3889?
CVE-2013-3889 is considered critical as it allows remote attackers to execute arbitrary code.
How do I fix CVE-2013-3889?
To fix CVE-2013-3889, install the appropriate security updates provided by Microsoft for affected versions of Excel and Office.
What versions of Microsoft products are affected by CVE-2013-3889?
CVE-2013-3889 affects Microsoft Excel 2007 SP3, 2010 SP1 and SP2, and 2013, as well as Microsoft Office and SharePoint Server versions 2007, 2010, and 2013.
Can CVE-2013-3889 be exploited via email attachments?
Yes, CVE-2013-3889 can be exploited through malicious email attachments that contain specially crafted Excel files.
What type of attacks are associated with CVE-2013-3889?
CVE-2013-3889 is associated with remote code execution attacks, allowing attackers to gain control over the affected system.