This script is Copyright (C) 2010-2015 Tenable Network Security, Inc.
The remote host has multiple vulnerabilities.
The remote Windows host is running a version of InfoPath, SharePoint
Server, or SharePoint Services with the following vulnerabilities :
- A cross-site scripting vulnerability in Help.aspx.
- An information disclosure vulnerability in the
toStaticHTML() API. (CVE-2010-1257)
- A denial of service vulnerability, triggered by sending
specially crafted requests to the help page.
See also :
Microsoft has released a set of patches for InfoPath 2003, InfoPath
2007, SharePoint Server 2007, and SharePoint Services 3.0.
Risk factor :
Medium / CVSS Base Score : 5.0
CVSS Temporal Score : 4.1
Public Exploit Available : true
Family: Windows : Microsoft Bulletins
Nessus Plugin ID: 46846 ()
Bugtraq ID: 397764040940559
CVE ID: CVE-2010-0817CVE-2010-1257CVE-2010-1264
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.