Detections
Analytics
MS12-067: Vulnerabilities in FAST Search Server 2010 for SharePoint Parsing Could Allow Remote Code Execution (2742321)
low Nessus Plugin ID 62462
Language:
Synopsis
The remote Windows host is affected by multiple code execution vulnerabilities.Description
The remote host is using a vulnerable version of FAST Search Server 2010 for SharePoint. When the Advanced Filter Pack is enabled, vulnerable versions of the Oracle Outside In libraries are used to parse files. An attacker could exploit this by uploading a malicious file to a site using FAST Search to index, which could result in arbitrary code execution.Solution
Microsoft has released a set of patches for FAST Search Server 2010.See Also
https://docs.microsoft.com/en-us/security-updates/SecurityAdvisories/2012/2737111
https://docs.microsoft.com/en-us/security-updates/SecurityBulletins/2012/ms12-067
Plugin Details
Severity: Low
ID: 62462
File Name: smb_nt_ms12-067.nasl
Version: 1.19
Type: local
Agent: windows
Family: Windows : Microsoft Bulletins
Published: 10/10/2012
Updated: 12/4/2019
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.5
CVSS v2
Risk Factor: Low
Base Score: 2.1
Temporal Score: 1.8
Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:P
CVSS Score Source: CVE-2012-3110
Vulnerability Information
CPE: cpe:/o:microsoft:windows
Required KB Items: SMB/MS_Bulletin_Checks/Possible
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 10/9/2012
Vulnerability Publication Date: 7/17/2012
Exploitable With
ExploitHub (EH-12-497)
Reference Information
CVE: CVE-2012-1766, CVE-2012-1767, CVE-2012-1768, CVE-2012-1769, CVE-2012-1770, CVE-2012-1771, CVE-2012-1772, CVE-2012-1773, CVE-2012-3106, CVE-2012-3107, CVE-2012-3108, CVE-2012-3109, CVE-2012-3110
BID: 54497, 54500, 54504, 54506, 54511, 54531, 54536, 54541, 54543, 54546, 54548, 54550, 54554