CVE-2013-3855

2013-09-1114:03:48

CWE-119

microsoft

web.nvd.nist.gov

cve-2013-3855

microsoft word

office compatibility pack

word viewer

memory corruption

arbitrary code execution

denial of service

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.644

Percentile

97.9%

JSON

Microsoft Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka “Word Memory Corruption Vulnerability.”

Affected configurations

Nvd

Node

microsoftoffice_compatibility_packsp3

microsoftwordMatch2003sp3

microsoftwordMatch2007sp3

microsoftword_viewer

VendorProductVersionCPE
microsoftoffice_compatibility_pack*cpe:2.3:a:microsoft:office_compatibility_pack:*:sp3:*:*:*:*:*:*
microsoftword2003cpe:2.3:a:microsoft:word:2003:sp3:*:*:*:*:*:*
microsoftword2007cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*
microsoftword_viewer*cpe:2.3:a:microsoft:word_viewer:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	office_compatibility_pack	*	cpe:2.3:a:microsoft:office_compatibility_pack::sp3::::::*
microsoft	word	2003	cpe:2.3:a:microsoft:word:2003:sp3::::::
microsoft	word	2007	cpe:2.3:a:microsoft:word:2007:sp3::::::
microsoft	word_viewer	*	cpe:2.3:a:microsoft:word_viewer::::::::