CVE-2013-1323: Microsoft Publisher

High severity, CVSS 9.3. EPSS: 20.8% chance of exploitation in the next 30 days.

Microsoft Publisher 2003 SP3 does not properly handle NULL values for unspecified data items, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka "Publisher Incorrect NULL Value Handling Vulnerability."

Affected products

• Microsoft Publisher: version 2003 only

Published 2013-05-15. Last modified 2026-06-16.