CVE Vulnerabilities

CVE-2010-3964

Published: Dec 16, 2010 | Modified: Oct 12, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka Malformed Request Code Execution Vulnerability.

Affected Software

Name Vendor Start Version End Version
Sharepoint_server Microsoft 2007-sp2 (including) 2007-sp2 (including)

References