Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.3
CVE-2013-3855: Word, Compatibility Pack, Viewer can run malicious code
CVE-2013-3855 · published 13 years ago
Summary
Microsoft Word 2003 and 2007, the Office Compatibility Pack, and Word Viewer can be tricked by a specially crafted document to execute unwanted programs or crash the application. This happens because the program mishandles certain data in the file, corrupting memory. Update the software with the latest patches or stop using these older versions to protect your systems.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | office_compatibility_pack |
All versions
cpe:2.3:a:microsoft:office_compatibility_pack:*:sp3:*:*:*:*:*:* |
| microsoft | word |
2003 2007 cpe:2.3:a:microsoft:word:2003:sp3:*:*:*:*:*:* |
| microsoft | word_viewer |
All versions
cpe:2.3:a:microsoft:word_viewer:*:*:*:*:*:*:*:* |
Original advisory text
Microsoft Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted ...
Microsoft Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability."
References
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Severity
9.3
Critical
Type
CWE-119Buffer Overflow
Timeline
Published11 Sep 2013
Updated29 Sep 2026
First seen29 Sep 2026
Sources
CVE-2013-3855 · NVD
Track software like this
Free during beta