CVE-2013-5054: Infoleak
Microsoft Office 2013 and 2013 RT allows remote attackers to discover authentication tokens via a crafted response to a file-open request for an Office file on a web site, as exploited in the wild in 2013, aka "Token Hijacking Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-5054?
CVE-2013-5054 is classified as a critical vulnerability due to its potential to allow attackers to hijack authentication tokens.
How do I fix CVE-2013-5054?
To resolve CVE-2013-5054, users should apply the latest security updates provided by Microsoft for Office 2013 and Office 2013 RT.
What types of attacks exploit CVE-2013-5054?
CVE-2013-5054 can be exploited through crafted responses to file-open requests, enabling token hijacking.
Which versions of Microsoft Office are affected by CVE-2013-5054?
CVE-2013-5054 affects Microsoft Office 2013 and Microsoft Office 2013 RT in both x64 and x86 architectures.
Is CVE-2013-5054 still relevant today?
While CVE-2013-5054 was reported in 2013, its relevance may persist in environments using outdated versions of Microsoft Office.