CVE-2010-3964

EPSS 94.2%
Veröffentlicht 16.12.2010 19:33:03
Zuletzt bearbeitet 16.06.2026 23:23:54
Erkennungen
Login

Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka "Malformed Request Code Execution Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 12

NVD 2 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Sharepoint Server Version 2007 Update sp2 Edition x32

Microsoft ≫ Sharepoint Server Version 2007 Update sp2 Edition x64

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	94.2%	0.998

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www.us-cert.gov/cas/techalerts/TA10-348A.html

US Government Resource

http://osvdb.org/69817

http://secunia.com/advisories/42631

Vendor Advisory

http://www.securityfocus.com/bid/45264

http://www.securitytracker.com/id?1024886

http://www.vupen.com/english/advisories/2010/3226

Vendor Advisory

http://www.zerodayinitiative.com/advisories/ZDI-10-287/

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-104

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11737

https://nvd.nist.gov/vuln/detail/CVE-2010-3964

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-3964

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-3964

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2010-3964