CVE-2013-3160: Microsoft Office 2003 SP3 and 2007 SP3, Word 2003 SP3 and 2007 SP3, and Word Viewer allow remote attackers...

Security readout for executives and security teams

This vulnerability affects older Microsoft Office and Word components and can let a remote attacker read files from a victim system when a crafted XML document is processed. The source bundle does not provide a CVSS score or confirmed active exploitation. Business urgency depends on whether legacy Office 2003, Office 2007, Word, or Word Viewer remains in use. Exposure is most likely on endpoints or systems that still run the listed legacy Microsoft Office, Word, or Word Viewer versions and process untrusted XML or Office documents. The bundle does not identify server-side products, cloud services, or non-Microsoft software as affected. Give this high priority only where legacy Microsoft Office components remain deployed. The vulnerability can expose local files, but the provided sources do not show active exploitation or a severity score. Organizations without these old products have limited direct exposure. Mitigation focus: Review Microsoft MS13-072 for the applicable security update and deployment guidance.; Prioritize removal or isolation of affected legacy Office and Word Viewer installations.; Limit processing of untrusted XML or Office documents on affected systems until remediated..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.