CVE-2013-6801: Microsoft Word

High severity, CVSS 7.1. EPSS: 14.4% chance of exploitation in the next 30 days.

Microsoft Word 2003 SP2 and SP3 on Windows XP SP3 allows remote attackers to cause a denial of service (CPU consumption) via a malformed .doc file containing an embedded image, as demonstrated by word2003forkbomb.doc, related to a "fork bomb" issue.

Affected products

• Microsoft Word: version 2003 only

Published 2013-11-18. Last modified 2026-06-17.