Every CVE Search/ Get API key

CVE-2013-1322

Microsoft Publisher 2003 SP3 does not properly check table range data, which allows remote...

10.0 High

Microsoft Publisher 2003 SP3 does not properly check table range data, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Invalid Range Check Vulnerability."

Exploit likelihood

25.3%Down 24.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

Microsoft Publisher 2003 SP3 does not properly check table range data, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Invalid Range Check Vulnerability."

Record
CVE-2013-1322
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

Microsoft Publisher 2003 SP3 does not properly check table range data, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Invalid Range Check Vulnerability."

Record
CVE-2013-1322
Updated
2026-11-02
EUVDEUVD-2013-1362 No score

Microsoft Publisher 2003 SP3 does not properly check table range data, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Invalid Range Check Vulnerability."

Record
EUVD-2013-1362
Updated
2026-11-03
GitHub AdvisoriesGHSA-9jq6-gwfj-8q6f No score

Microsoft Publisher 2003 SP3 does not properly check table range data, which allows remote...

Microsoft Publisher 2003 SP3 does not properly check table range data, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Invalid Range Check Vulnerability."

Record
GHSA-9jq6-gwfj-8q6f
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-1322 is a high vulnerability (CVSS 10.0) in Microsoft Publisher, published May 15, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 25.3%, the 97th percentile. No source names a fixed version.

References

MoveEnter Open