CVE-2010-3964

{"id": "CVE-2010-3964", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-12-16T19:33:03.367", "references": [{"url": "http://osvdb.org/69817", "source": "secure@microsoft.com"}, {"url": "http://secunia.com/advisories/42631", "tags": ["Vendor Advisory"], "source": "secure@microsoft.com"}, {"url": "http://www.securityfocus.com/bid/45264", "source": "secure@microsoft.com"}, {"url": "http://www.securitytracker.com/id?1024886", "source": "secure@microsoft.com"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA10-348A.html", "tags": ["US Government Resource"], "source": "secure@microsoft.com"}, {"url": "http://www.vupen.com/english/advisories/2010/3226", "tags": ["Vendor Advisory"], "source": "secure@microsoft.com"}, {"url": "http://www.zerodayinitiative.com/advisories/ZDI-10-287/", "source": "secure@microsoft.com"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-104", "source": "secure@microsoft.com"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11737", "source": "secure@microsoft.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka \"Malformed Request Code Execution Vulnerability.\""}, {"lang": "es", "value": "Vulnerabilidad de subida de archivos sin restricciones en el Document Conversions Launcher Service en Microsoft Office SharePoint Server 2007 SP2, cuando Document Conversions Load Balancer Service est\u00e1 habilitado, permite a los atacantes remotos ejecutar c\u00f3digo arbitrario mediante una solicitud SOAP dise\u00f1ada al puerto TCP 8082, tambi\u00e9n se conoce como \"Malformed Request Code Execution Vulnerability.\""}], "lastModified": "2018-10-12T21:58:54.960", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:sharepoint_server:2007:sp2:x32:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "586E6C37-346C-40BA-AC89-2CEB8C44E190"}, {"criteria": "cpe:2.3:a:microsoft:sharepoint_server:2007:sp2:x64:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "48EB5C93-55BF-4608-A9DC-EDD8DE15EE44"}], "operator": "OR"}]}], "evaluatorComment": "Additional information from Microsoft can be found here:\r\n\r\nhttp://blogs.technet.com/b/srd/archive/2010/12/14/ms10-104-sharepoint-2007-vulnerability.aspx\r\n\r\nPer: http://cwe.mitre.org/data/definitions/434.html\r\n\r\n'CWE-434: Unrestricted Upload of File with Dangerous Type'", "sourceIdentifier": "secure@microsoft.com"}