CVE-2010-3964
Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka "Malformed Request Code Execution Vulnerability."
- Affected products
- Office Sharepoint Server 2007, Sharepoint Server
- Microsoft Sharepoint Server
- = 2007
- CVSS 2.0
- 7.5 HIGH
- EPSS
- 93.9% (100th percentile)
- NVD status
- Modified
- Published
- 2010-12-16
CVE-2010-3964 at NVD
9 known exploits for CVE-2010-3964
Proof-of-concept code and exploit modules indexed by Sploitus
Microsoft Office SharePoint Server 2007 - Remote Code Execution (MS10-104) (Metasploit)
MS10-104 Microsoft Office SharePoint Server 2007 Remote Code Execution
Microsoft Office SharePoint Server 2007 Remote Code Execution
Microsoft Office SharePoint Server 2007 Remote Code Execution
Microsoft SharePoint Office Document Load Balancer SOAP Vulnerability
Microsoft SharePoint Office Document Load Balancer SOAP Vulnerability
Microsoft SharePoint Office Document Load Balancer SOAP Vulnerability
Microsoft SharePoint Office Document Load Balancer SOAP Vulnerability
Microsoft SharePoint畸形SOAP请求远程代码执行漏洞(MS10-104)