CVE-2010-3964

60Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 94%

from disclosure to weapon593 days

Published on NVDDec 16

1st PoC+593d

metasploitDec 14

exploitation probability

94%top 1% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka "Malformed Request Code Execution Vulnerability."

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/20122unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://osvdb.org/69817 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-104 http://secunia.com/advisories/42631 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11737 http://www.securityfocus.com/bid/45264 http://www.securitytracker.com/id?1024886 http://www.us-cert.gov/cas/techalerts/TA10-348A.html http://www.vupen.com/english/advisories/2010/3226 http://www.zerodayinitiative.com/advisories/ZDI-10-287/