{
    "id": "CVE-2013-1331",
    "published": "2013-06-12 03:29:57",
    "last_modified": "2026-06-16 23:51:13",
    "cvss_score": "7.8",
    "cvss_severity": "HIGH",
    "cvss_version": "3.1",
    "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
    "cwe": "CWE-120",
    "description": "Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka \"Office Buffer Overflow Vulnerability.\"",
    "epss_score": "0.79822",
    "epss_percentile": "0.99600",
    "kev": 1,
    "kev_due": "2022-06-22",
    "has_exploit": 0,
    "updated_at": "2026-09-26 18:18:53",
    "priority": {
        "rank": 1,
        "label": "Patch first",
        "why": "On CISA KEV — known exploited in the wild, due 2022-06-22."
    },
    "products": [
        {
            "vendor": "microsoft",
            "product": "office"
        }
    ],
    "kev_detail": {
        "cve_id": "CVE-2013-1331",
        "date_added": "2022-06-08",
        "due_date": "2022-06-22",
        "vendor": "Microsoft",
        "product": "Office",
        "name": "Microsoft Office Buffer Overflow Vulnerability",
        "ransomware": 0
    },
    "exploits": [],
    "refs_list": [
        "http://www.us-cert.gov/ncas/alerts/TA13-168A",
        "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-051",
        "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16713",
        "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16732",
        "http://www.us-cert.gov/ncas/alerts/TA13-168A",
        "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-051",
        "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16713",
        "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16732",
        "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-1331"
    ]
}