CVE-2013-1324: Stack-based buffer overflow in Microsoft Office 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT all...

Security readout for executives and security teams

CVE-2013-1324 is a remote code execution flaw in older Microsoft Office versions. A malicious WordPerfect document could trigger a stack buffer overflow and let an attacker run code with the user’s privileges. The main business risk is legacy Office use combined with inbound or archived .wpd document handling. Exposure is most likely where legacy Microsoft Office versions remain installed and users can receive or open .wpd files from email, web downloads, file shares, or archives. Current Office-only environments are less likely exposed, but the bundle does not provide modern product status. Treat as high priority if legacy Office exists in the estate. The vulnerability enables code execution from a document file, but urgency should be based on confirmed affected installations and whether .wpd files can reach users. Mitigation focus: Review and apply Microsoft MS13-091 guidance for affected Office installations.; Retire or isolate unsupported legacy Office versions where possible.; Restrict inbound .wpd attachments if business use is not required..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.