Trend Micro Security

MS13-100：Microsoft SharePoint Server の脆弱性により、リモートでコードが実行される (2904244)

2013年12月27日
  危険度: : 高
  CVE識別番号: CVE-2013-5059

  概要

This security update resolves multiple privately reported vulnerabilities in Microsoft Office server software. These vulnerabilities could allow remote code execution if an authenticated attacker sends specially crafted page content to a SharePoint server. An attacker who successfully exploited these vulnerabilities could run arbitrary code in the security context of the W3WP service account on the target SharePoint site.

  トレンドマイクロの対策

  対応方法

  影響を受けるソフトウェア

  • Microsoft SharePoint Server 2013
  • Microsoft SharePoint Server 2010 Service Pack 2
  • Microsoft Office Web Apps 2013