NVD

Id
15294  
Name
CVE-2010-3964  
Description
Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka "Malformed Request Code Execution Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-12-16  
Modified Date
2011-07-18  
Seq
2010-3964  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
86135 15294 CVE-2010-3964 oval:org.mitre.oval:def:11737  View
86136 15294 CVE-2010-3964 MS10-104  View
86137 15294 CVE-2010-3964 45264  View
86138 15294 CVE-2010-3964 1024886  View
86139 15294 CVE-2010-3964 TA10-348A  View
86140 15294 CVE-2010-3964 ADV-2010-3226  View
86141 15294 CVE-2010-3964 http://www.zerodayinitiative.com/advisories/ZDI-10-287/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36864 JVNDB-2010-002644 Microsoft Office SharePoint Server 2007 における任意のコードを実行される脆弱性 Microsoft Office SharePoint Server 2007 の Document Conversions Launcher Service には、 Document Conversions Load Balancer Service が有効な際、任意のコードを実行される脆弱性が存在します。 CVE-2010-3964 46544 CVE-2010-3964 15294 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002644.html 2010-12-14 2011-01-18 View