CVE-2010-3964
Microsoft SharePoint Server 2007 SP2 - Remote Code Execution via Malformed SOAP Request
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2010-3964.
PoCs published by Metasploit, Oleksandr Mirosh, James Burton, Entomology: A Case Study of Rare and Interesting Bugs, juan vazquez, including Metasploit module exploits/windows/misc/ms10_104_sharepoint.
AI-analyzed exploit summary This Metasploit module exploits a directory traversal vulnerability in Microsoft Office SharePoint Server 2007 SP2 to achieve remote code execution via arbitrary file upload and WMI execution.
Description
Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka "Malformed Request Code Execution Vulnerability."
Exploits (2)
This Metasploit module exploits a directory traversal vulnerability in Microsoft Office SharePoint Server 2007 SP2 to achieve remote code execution via arbitrary file upload and WMI execution.
This Metasploit module exploits a directory traversal vulnerability in Microsoft Office SharePoint Server 2007 SP2, allowing arbitrary file uploads via a crafted SOAP request to the Office Document Conversions Launcher Service, leading to remote code execution as SYSTEM.