Detections
Analytics
MS13-084: Vulnerabilities in Microsoft SharePoint Server Could Allow Remote Code Execution (2885089)
high Nessus Plugin ID 70336
Language:
Synopsis
The remote host is affected by multiple vulnerabilities.Description
The versions of Office SharePoint Server, SharePoint Server, Windows SharePoint Services, SharePoint Foundation, or Office Web Apps installed on the remote host are affected by multiple vulnerabilities :- A remote code execution vulnerability exists in the way that Microsoft Office Services and Web Apps parse content in specially crafted files. (CVE-2013-3889)
- An elevation of privilege vulnerability exists.
(CVE-2013-3895)
Solution
Microsoft has released a set of patches for SharePoint Server 2007, SharePoint Server 2010, SharePoint Foundation 2010, SharePoint Server 2013, and Office Web Apps 2010.See Also
https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2013/ms13-084
Plugin Details
Severity: High
ID: 70336
File Name: smb_nt_ms13-084.nasl
Version: 1.14
Type: local
Agent: windows
Family: Windows : Microsoft Bulletins
Published: 10/9/2013
Updated: 11/15/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:microsoft:sharepoint_server, cpe:/a:microsoft:office_web_apps
Required KB Items: SMB/MS_Bulletin_Checks/Possible
Exploit Ease: No known exploits are available
Patch Publication Date: 10/8/2013
Vulnerability Publication Date: 10/8/2013
Reference Information
CVE: CVE-2013-3889, CVE-2013-3895