CVEvulnerability
CVE-2010-3964
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-12-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka "Malformed Request Code Execution Vulnerability."
Affected configurations
• microsoft sharepoint server 2007
References
- http://osvdb.org/69817 osvdb.org
- http://secunia.com/advisories/42631 Vendor Advisory
- http://www.securityfocus.com/bid/45264 www.securityfocus.com
- http://www.securitytracker.com/id?1024886 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA10-348A.html US Government Resource
- http://www.vupen.com/english/advisories/2010/3226 Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-10-287/ www.zerodayinitiative.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-104 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11737 oval.cisecurity.org
- http://osvdb.org/69817 osvdb.org
- http://secunia.com/advisories/42631 Vendor Advisory
- http://www.securityfocus.com/bid/45264 www.securityfocus.com
- http://www.securitytracker.com/id?1024886 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA10-348A.html US Government Resource
- http://www.vupen.com/english/advisories/2010/3226 Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-10-287/ www.zerodayinitiative.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-104 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11737 oval.cisecurity.org