CVE-2010-3964 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 94.2% (pctl 100)
Patch early
A public exploit exists.
Description
Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka "Malformed Request Code Execution Vulnerability."
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 94.2% — more likely to be exploited than 100% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2010-12-16 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| microsoft | sharepoint server |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Microsoft Office SharePoint Server 2007 - Remote Code Execution (MS10-104) (Metasploit) | 2012-07-31 |
References
- http://osvdb.org/69817
- http://secunia.com/advisories/42631
- http://www.securityfocus.com/bid/45264
- http://www.securitytracker.com/id?1024886
- http://www.us-cert.gov/cas/techalerts/TA10-348A.html
- http://www.vupen.com/english/advisories/2010/3226
- http://www.zerodayinitiative.com/advisories/ZDI-10-287/
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-104
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11737
- http://osvdb.org/69817
- http://secunia.com/advisories/42631
- http://www.securityfocus.com/bid/45264
- http://www.securitytracker.com/id?1024886
- http://www.us-cert.gov/cas/techalerts/TA10-348A.html
- http://www.vupen.com/english/advisories/2010/3226
- http://www.zerodayinitiative.com/advisories/ZDI-10-287/
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-104
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11737
→ the Explorer · watch your stack · NVD