CVE-2010-3964

Microsoft Sharepoint Server - Unrestricted File Upload

Title source: rule

Description

Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka "Malformed Request Code Execution Vulnerability."

Exploits (2)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotewindows

https://www.exploit-db.com/exploits/20122

View Code ZIP pw:eip

metasploit WORKING POC EXCELLENT

by Oleksandr Mirosh, James Burton, Entomology: A Case Study of Rare and Interesting Bugs, juan vazquez · rubypocwin

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/ms10_104_sharepoint.rb

View Code ZIP pw:eip

References (9)

[Third Party Advisory, VDB Entry] http://osvdb.org/69817

[Vendor Advisory] http://secunia.com/advisories/42631

[US Government Resource] http://www.us-cert.gov/cas/techalerts/TA10-348A.html

[Vendor Advisory] http://www.vupen.com/english/advisories/2010/3226

[Vendor Advisory] https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-104

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11737

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/45264

[Third Party Advisory] http://www.zerodayinitiative.com/advisories/ZDI-10-287/

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1024886

Scores

EPSS 0.9060

EPSS Percentile 99.6%

Details

Status published

Products (1)

microsoft/sharepoint_server 2007 sp2 (2 CPE variants)

Published Dec 16, 2010

Tracked Since Feb 18, 2026