KLA10582 Code execution vulnerability in Microsoft Sharepoint Server

2015-05-1200:00:00

Kaspersky Lab

threats.kaspersky.com

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

7.5 High

AI Score

Confidence

Low

0.048 Low

EPSS

Percentile

92.7%

JSON

An unspecified vulnerability was found in Microsoft SharePoint Server. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed page content.

Original advisories

Microsoft bulletin

CVE-2015-1700

Related products

Microsoft-Sharepoint-Server

CVE list

CVE-2015-1700 high

KB list

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

SharePoint Server 2007 x86, x64 Service Pack 3SharePoint Foundation 2010 Service Pack 2SharePoint Server 2010 Service Pack 2SharePoint Foundation 2013 Service Pack 1