CVE-2013-1315

Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."

Affected products

Office Excel, Excel Viewer, Sharepoint Server, Office Compatibility Pack, Office Web Apps, Office For Mac

Microsoft Excel

= 2003, 2007, 2010, 2013

Microsoft Excel Viewer

All versions

Microsoft Office

= 2011

Microsoft Office Compatibility Pack

All versions

Microsoft Sharepoint Foundation

= 2010

Fix

Available

CVSS 2.0

9.3 HIGH

EPSS

28.7% (98th percentile)

Weakness

CWE-119

NVD status

Modified

Published

2013-09-11