GCVE - cpe:2.3:a:microsoft:office:2013:-:-:*:-:-:x86:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:office:2013:-:-:*:-:-:x86:*

part: a version: 2013 update: -

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Office (`500dd0f0-abf7-5a48-83ed-09faf7777559`)
Edition	-
Language	*
Software edition	-
Target software	-
Target hardware	x86
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-2730`	vulnerable	2026-06-08 05:05:29.705689	Details available The XML parser in Microsoft Office 2007 SP3, 2010 SP1 and SP2, and 2013, and Office for Mac 2011, does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory consumption and persistent application hang) via a crafted XML document containing a large number of nested entity references, as demonstrated by a crafted text/plain e-mail message to Outlook, a similar issue to CVE-2003-1564. Published: 2014-04-05T14:00:00.000Z Updated: 2024-08-06T10:21:36.079Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/531722/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5054`	vulnerable	2026-06-08 05:04:50.712150	Details available Microsoft Office 2013 and 2013 RT allows remote attackers to discover authentication tokens via a crafted response to a file-open request for an Office file on a web site, as exploited in the wild in 2013, aka "Token Hijacking Vulnerability." Published: 2013-12-11T00:00:00.000Z Updated: 2024-08-06T16:59:41.281Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-104	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1324`	vulnerable	2026-06-08 05:03:53.372740	Details available Stack-based buffer overflow in Microsoft Office 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT allows remote attackers to execute arbitrary code via a crafted WordPerfect document (.wpd) file, aka "Word Stack Buffer Overwrite Vulnerability." Published: 2013-11-13T00:00:00.000Z Updated: 2024-08-06T14:57:04.875Z Open on db.gcve.eu Reference links http://www.us-cert.gov/ncas/alerts/TA13-317A https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19162 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-091	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.