# CVE-2013-1331

## Summary

- **CVE ID:** CVE-2013-1331
- **Severity:** HIGH
- **CVSS Score:** 7.8 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- **CWE:** N/A
- **Published:** Jun 12, 2013
- **Last Modified:** Sep 16, 2026

## Description

Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka "Office Buffer Overflow Vulnerability."

## Affected Products

- n/a — n/a (n/a)

## References

- [CNA](https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16713)
- [CNA](http://www.us-cert.gov/ncas/alerts/TA13-168A)
- [CNA](https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16732)
- [CNA](https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-051)
- [CISA-ADP](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-1331)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 88.92%
- **EPSS Percentile:** 99.5

## Known Exploited Vulnerabilities (KEV)

- **Date Added:** Jun 8, 2022
- **Due Date:** Jun 22, 2022

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-18._