The vulnerability of the Microsoft SharePoint Server software allows a remote attacker to execute arbitrary code with privileges of the current user.

🗓️ 05 Jul 2016 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

SharePoint Server vulnerability allows remote code execution as the current user via crafted files.

Reporter	Title	Published	Views	Family All 57
0day.today	MS14-017 Microsoft Word RTF Object Confusion Exploit	9 Apr 201400:00	–	zdt
ATTACKERKB	CVE-2014-1761	25 Mar 201400:00	–	attackerkb
BDU FSTEC	The vulnerability of the Microsoft Office Web Apps package allows a remote attacker to execute arbitrary code with privileges of the current user.	5 Jul 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office software allows a malicious attacker to execute arbitrary code with privileges of the current user.	5 Jul 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office software allows a malicious attacker to execute arbitrary code with privileges of the current user.	5 Jul 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Word Viewer allows a malicious attacker to execute arbitrary code with the privileges of the current user.	5 Jul 201600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Word text editors allows a malicious attacker to execute arbitrary code with the privileges of the current user.	5 Jul 201600:00	–	bdu_fstec
Carbon Black Blog	Threat Analysis: Pylot (Travle) Malware Family	26 Jan 201817:46	–	carbonblack
Circl	CVE-2014-1761	24 Mar 201418:48	–	circl
CISA KEV Catalog	Microsoft Word Memory Corruption Vulnerability	15 Feb 202200:00	–	cisa_kev

Vulners

Node

microsoft microsoft_sharepoint_serverMatch2013

Source	Link
technet	www.technet.microsoft.com/ru-ru/security/bulletin/ms14-017
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
web	www.web.nvd.nist.gov/view/vuln/detail
osvdb	www.osvdb.org/104895

16 Oct 2018 00:00Current

8.3High risk

Vulners AI Score8.3

CVSS 29.3

EPSS0.93336

Microsoft SharePoint Server Remote code execution Crafted files Current user privileges