CVE-2013-3855: Microsoft Office Compatibility Pack

High severity, CVSS 9.3. EPSS: 20.1% chance of exploitation in the next 30 days.

Microsoft Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability."

Affected products

• Microsoft Office Compatibility Pack: any version
• Microsoft Word: version 2003 only; version 2007 only
• Microsoft Word Viewer: any version

Published 2013-09-11. Last modified 2026-06-16.