Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2013-6801

29
FAUCET Score

CVE-2013-6801 describes a denial-of-service vulnerability affecting Microsoft Word 2003 SP2 and SP3 on Windows XP SP3. An attacker can exploit this by crafting a malicious .doc file with an embedded image, leading to excessive CPU consumption on the victim's system. The vulnerability has a CVSS v2 score of 7.1 (High), indicating a network-based attack with medium complexity and a complete impact on availability. Its FAUCET Risk Score is 86/100, highlighting its significant potential for disruption. Despite its severity, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or Nuclei. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness.

Impacted Technologies

VendorProductVersion(s)CPE
2003CPE matchmatch criteria
cpe:2.3:a:microsoft:word:2003:sp2:*:*:*:*:*:*
2003CPE matchmatch criteria
cpe:2.3:a:microsoft:word:2003:sp3:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

7.1HIGH

AV:N/AC:M/Au:N/C:N/I:N/A:C

Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Exploitability Score
8.6
Impact Score
6.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
14.43%
Probability of exploitation in next 30 days
EPSS Percentile
96.3%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.1443 is in the 80th percentile among its peer group of 8,920 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Remediation records are not available for this CVE.

References

archives.neohapsis.com / archives/bugtraq/2013-11/0035.html
archives.neohapsis.com / archives/bugtraq/2013-11/0038.html
Exploit
archives.neohapsis.com / archives/bugtraq/2013-11/0045.html