Microsoft SharePoint CVE-2015-1700 Multiple Remote Code Execution Vulnerabilities

Bugtraq ID:	74480
Class:	Input Validation Error
CVE:	CVE-2015-1700
Remote:	Yes
Local:	No
Published:	May 12 2015 12:00AM
Updated:	May 12 2015 12:00AM
Credit:	Microsoft
Vulnerable:
Not Vulnerable:

Microsoft SharePoint CVE-2015-1700 Multiple Remote Code Execution Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.


Microsoft SharePoint Server 2007 for 64-bit SP3

• Microsoft Security Update for Microsoft Office SharePoint Server 2007 (KB2760412) 64-Bit Edition
  https://www.microsoft.com/downloads/details.aspx?FamilyId=72466e6e-099 9-40ab-a1ad-7c6234c0e9ef

Microsoft SharePoint Foundation 2013 SP1

• Microsoft Security Update for Microsoft SharePoint Foundation 2013 (KB3054792)
  https://www.microsoft.com/downloads/details.aspx?FamilyId=f80f78e0-5d9 6-4015-835f-a0d9519f091d

Microsoft SharePoint Server 2007 for 32-bit SP3

• Microsoft Security Update for Microsoft Office SharePoint Server 2007 (KB2760412) 32-Bit Edition
  https://www.microsoft.com/downloads/details.aspx?FamilyId=c5b74cbd-f7c 7-465a-adf9-2ce147394e84

Microsoft SharePoint Foundation 2010 SP2

• Microsoft Security Update for Microsoft SharePoint Foundation 2010 (KB3017815)
  https://www.microsoft.com/downloads/details.aspx?FamilyId=abf3894c-c5d 0-4d9f-bcb9-8913a7852143

Microsoft SharePoint Server 2010 SP2

• Microsoft Security Update for 2010 Microsoft Business Productivity Servers (KB2956192)
  https://www.microsoft.com/downloads/details.aspx?FamilyId=230dbd3d-55d d-4e00-a172-a1fcbaac2bab