CISA Known Exploited Vulnerability

CVE-2013-1331

Microsoft · Office

Microsoft Office Buffer Overflow Vulnerability

Date added
BOD 22-01 due date
CWE CWE-119
Ransomware Unknown

CISA description

Microsoft Office contains a buffer overflow vulnerability that allows remote attackers to execute code via crafted PNG data in an Office document.

Required action

Apply updates per vendor instructions.