CVE-2013-1316: Microsoft Publisher

High severity, CVSS 9.3. EPSS: 21.8% chance of exploitation in the next 30 days.

Microsoft Publisher 2003 SP3 does not properly validate the size of an unspecified array, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Negative Value Allocation Vulnerability."

Affected products

• Microsoft Publisher: version 2003 only

Published 2013-05-15. Last modified 2026-06-16.