Oleksandr Mirosh

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

A denial of service issue exists due to the way the Microsoft Exchange store processes specially crafted RPC calls. The vulnerable code path is only accessible to authenticated users. An authenticated attacker could exploit this by sending a specially crafted network message to a computer running the Exchange service, causing the Exchange service to stop responding until manually restarted.

The issue is related to an unrestricted file upload vulnerability in the Document Conversions Launcher Service. This allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082. A remote code execution vulnerability exists in the way the Document Conversions Launcher Service validates SOAP requests before processing on a SharePoint server. An attacker who successfully exploited this vulnerability could run arbitrary code on an affected SharePoint server under the security context of a guest account.

A use-after-free issue in the Media Player Network Sharing Service allows remote attackers to execute arbitrary code via a crafted Real Time Streaming Protocol (RTSP) packet. This could enable a remote user to send a specially crafted network packet to an instance of the application's network streaming service, causing remote code execution in the context of the current application.