CVE-2013-1325: Heap-based buffer overflow in Microsoft Office 2003 SP3 and 2007 SP3 allows remote attackers to execute arb...

Security readout for executives and security teams

CVE-2013-1325 is a Microsoft Office flaw where opening a malicious WordPerfect (.wpd) document could let an attacker run code on the affected machine. The source bundle names Office 2003 SP3 and Office 2007 SP3. The main business risk is legacy Office still handling untrusted document attachments. Exposure is most likely where Microsoft Office 2003 SP3 or 2007 SP3 remains installed and users can receive or open .wpd files from email, downloads, shared drives, or archives. Modern environments without these legacy Office versions are less likely exposed based on the supplied sources. Treat this as a high-priority legacy software risk if Office 2003 or 2007 remains in use. If those versions are absent, priority drops to confirming inventory accuracy and blocking legacy document exposure paths. Mitigation focus: Review and apply Microsoft MS13-091 security update guidance for affected Office installations.; Retire or isolate Office 2003 SP3 and 2007 SP3 where still present.; Restrict or quarantine unexpected WordPerfect .wpd attachments and downloads..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.