CVE-2013-1321: Microsoft Publisher

High severity, CVSS 9.3. EPSS: 21.7% chance of exploitation in the next 30 days.

Microsoft Publisher 2003 SP3 does not properly check the data type of an unspecified return value, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Return Value Validation Vulnerability."

Affected products

• Microsoft Publisher: version 2003 only

Published 2013-05-15. Last modified 2026-06-16.