CVE-2010-3964

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 94.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-12-16 · updated 2026-06-16

Description

Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka "Malformed Request Code Execution Vulnerability."

Affected products

Microsoft SharePoint Server: 2007-sp2

References

http://osvdb.org/69817
http://secunia.com/advisories/42631
http://www.securityfocus.com/bid/45264
http://www.securitytracker.com/id?1024886
http://www.us-cert.gov/cas/techalerts/TA10-348A.html
http://www.vupen.com/english/advisories/2010/3226
http://www.zerodayinitiative.com/advisories/ZDI-10-287/
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-104
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11737
http://osvdb.org/69817
http://secunia.com/advisories/42631
http://www.securityfocus.com/bid/45264

Get alerted when CVE-2010-3964 or the next vulnerability affects your stack