Signature Detail

HTTP: Microsoft Sharepoint Document Conversion Remote Code Execution

This signature detects attempts to exploit a known vulnerability against Microsoft Sharepoint. A successful attack can lead to arbitrary code execution.

Extended Description

Microsoft SharePoint is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code within the privileges of the guest account on the SharePoint server. Failed exploit attempts will result in a denial-of-service condition.

Affected Products

• Microsoft SharePoint Server 2007 SP1
• Microsoft SharePoint Server 2007 SP2
• Microsoft SharePoint Server 2007
• Microsoft SharePoint Server 2007 x64 SP1
• Microsoft SharePoint Server 2007 x64 SP2
• Microsoft SharePoint Server 2007 x64

References

• BugTraq: 45264
• CVE: CVE-2010-3964