CVE-2013-5057: hxds.dll in Microsoft Office 2007 SP3 and 2010 SP1 and SP2 does not implement the ASLR protection mechanism...

Security readout for executives and security teams

This vulnerability weakens a key memory-protection defense in affected Microsoft Office components. An attacker could use a malicious website viewed in Internet Explorer to make code execution attacks more reliable. The bundle reports exploitation in the wild in December 2013, but provides no evidence of current active exploitation. Exposure is most likely where legacy Microsoft Office 2007 SP3 or Office 2010 SP1/SP2 exists on endpoints that browse untrusted websites with Internet Explorer. The provided affected metadata is incomplete and lists no CPEs. Treat this as a high-priority legacy exposure issue. It is old but historically exploited, and remaining vulnerable Office installations may indicate broader endpoint hygiene and unsupported-software risk. Mitigation focus: Apply the Microsoft MS13-106 security update to affected Office installations.; Inventory and remove affected Office versions where patching is not possible.; Limit Internet Explorer access to untrusted websites on exposed endpoints..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.