Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-3889

Microsoft Excel 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; Office Compatibility Pack SP3; and Excel Services and Word Automation Services in SharePoint Server 2013 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Excel Memory Corruption Vulnerability."

Published

2013-10-09T14:53:25.013

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

8.6

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-119
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application microsoft excel 2010 Yes
Application microsoft excel 2010 Yes
Application microsoft excel 2013 Yes
Application microsoft excel 2013 Yes
Application microsoft excel_viewer * Yes
Application microsoft office 2007 Yes
Application microsoft office 2010 Yes
Application microsoft office 2010 Yes
Application microsoft office 2011 Yes
Application microsoft office 2013 Yes
Application microsoft office_2013_rt - Yes
Application microsoft office_compatibility_pack * Yes
Application microsoft office_web_apps 2010 Yes
Application microsoft office_web_apps 2010 Yes
Application microsoft sharepoint_server 2007 Yes
Application microsoft sharepoint_server 2013 Yes
Application microsoft sharepoint_server 2010 Yes
Application microsoft sharepoint_server 2010 Yes
References