PT-2014-1212 · Microsoft · Project Server 2013+15

Published 2014-05-13 · Updated 2018-10-12 · CVE-2014-0251

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows SharePoint Services 3.0 SP3 SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1 SharePoint Foundation 2010 SP1 and SP2 and 2013 Gold and SP1 Project Server 2010 SP1 and SP2 and 2013 Gold and SP1 Web Applications 2010 SP1 and SP2 Office Web Apps Server 2013 Gold and SP1 SharePoint Server 2013 Client Components SDK SharePoint Designer 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1

Description The issue allows remote authenticated users to execute arbitrary code via crafted page content. Exploitation of this issue enables a remote attacker to run arbitrary code and gain full control over the system. The vulnerability is related to errors that occur when processing specially crafted files. An authenticated attacker who successfully exploits this issue could run arbitrary code in the security context of the W3WP service account.

Recommendations For Microsoft Windows SharePoint Services 3.0 SP3, update to a newer version to mitigate the risk. For SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1, update to a newer version to mitigate the risk. For SharePoint Foundation 2010 SP1 and SP2 and 2013 Gold and SP1, update to a newer version to mitigate the risk. For Project Server 2010 SP1 and SP2 and 2013 Gold and SP1, update to a newer version to mitigate the risk. For Web Applications 2010 SP1 and SP2, update to a newer version to mitigate the risk. For Office Web Apps Server 2013 Gold and SP1, update to a newer version to mitigate the risk. For SharePoint Server 2013 Client Components SDK, update to a newer version to mitigate the risk. For SharePoint Designer 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1, update to a newer version to mitigate the risk. As a temporary workaround, consider restricting access to crafted page content until a patch is available.

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2014-00383

BDU:2014-00384

BDU:2014-00385

CVE-2014-0251

Affected Products

Windows Sharepoint Services 3.0

Office Web Apps Server 2013

Project Server 2010

Project Server 2013

Sharepoint Designer 2007

Sharepoint Designer 2010

Sharepoint Designer 2013

Sharepoint Foundation 2010

Sharepoint Foundation 2013

Sharepoint Server 2007

Sharepoint Server 2010

Sharepoint Server 2013

Sharepoint Server 2013 Client Components Sdk

Sharepoint Foundation

Sharepoint Server

Web Applications 2010

References · 10

• https://bdu.fstec.ru/vul/2014-00383 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2014-0251 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0251 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-022 · Vendor Advisory
• https://bdu.fstec.ru/vul/2014-00384 · Security Note
• https://bdu.fstec.ru/vul/2014-00385 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0251 · Note
• http://securitytracker.com/id/1030227 · Note
• http://technet.microsoft.com/ru-ru/security/bulletin/ms14-022 · Note
• http://technet.microsoft.com/en-us/security/bulletin/ms14-022 · Note