Oval Definition:oval:org.mitre.oval:def:18988
Revision Date:2013-11-26Version:7
Title:Denial of service vulnerability in Microsoft SharePoint (CVE-2013-3847) - MS13-067
Description:Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Word Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3848, CVE-2013-3849, and CVE-2013-3858.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2013-3847
Platform(s):Microsoft Windows 2000
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Microsoft Office Web Apps
Microsoft SharePoint Server 2010
Definition Synopsis
  • sharepoint server 2010/version
  • Microsoft SharePoint Server 2010 Service Pack 1 is installed
  • AND Check if the version of WdsrvWorker.dll is less than 14.0.6112.5000
  • OR web apps/version
  • Microsoft Office Web Apps 2010 Service Pack 1 is installed
  • AND Check if the version of msoserver.dll is less than 14.0.7106.5000
  • BACK