====================================================================

                           CERT-Renater

               Note d'Information No. 2015/VULN073
_____________________________________________________________________

DATE                : 13/05/2015

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running Microsoft SharePoint Server
                              version 2007, 2010, 2013.

======================================================================
KB3058083
https://technet.microsoft.com/en-us/library/security/MS15-047
______________________________________________________________________

MS15-047 - Vulnerabilities in Microsoft SharePoint Server Could Allow
Remote Code Execution - Important (3058083)

Bulletin Number: MS15-047

Bulletin Title: Vulnerabilities in Microsoft SharePoint Server Could
Allow Remote Code Execution

Severity: Important

KB Article: 3058083

Version: 1.0

Published Date: May 12, 2015


Executive Summary

This security update resolves vulnerabilities in Microsoft Office
server and productivity software. The vulnerabilities could allow
remote code execution if authenticated attacker sends specially crafted
page content to a SharePoint server. An attacker who successfully
exploited these vulnerabilities could run arbitrary code in the
security context of the W3WP service account on the target SharePoint
site.

This security update is rated Important for supported editions of
Microsoft SharePoint Server 2007, Microsoft SharePoint Server 2010,
Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013,
and Microsoft SharePoint Foundation 2013.

For more information, see the Affected Software section.


Affected Software

Microsoft SharePoint Server 2007 Service Pack 3 (32-bit editions)

Microsoft SharePoint Server 2010 Service Pack 2

Microsoft SharePoint Server 2013 Service


Vulnerability Information

Microsoft SharePoint Page Content Vulnerabilities CVE-2015-1700

Remote code execution vulnerabilities exist when SharePoint Server
improperly sanitizes specially crafted page content. An authenticated
attacker could attempt to exploit these vulnerabilities by sending
specially crafted page content to a SharePoint server. The attacker who
successfully exploited these vulnerabilities could run arbitrary code
in the security context of the W3WP service account on the target
SharePoint site. Systems that are running an affected version of
SharePoint Server are primarily at risk.

The security update addresses the vulnerabilities by correcting how
SharePoint Server sanitizes specially crafted page content.

Microsoft received information about the vulnerabilities through
coordinated vulnerability disclosure. When this security bulletin was
issued, Microsoft had not received any information to indicate that
these vulnerabilities had been publicly used to attack customers.

To view this vulnerability as a standard entry in the Common
Vulnerabilities and Exposures list, see CVE-2015-1700.

=========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================