The default configuration of Microsoft SharePoint Portal Server 2003 SP3, SharePoint Server 2007 SP3 and 2010 SP1 and SP2, and Office Web Apps 2010 does not set the EnableViewStateMac attribute, which allows remote attackers to execute arbitrary code by leveraging an unassigned workflow, aka "MAC Disabled Vulnerability."
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published: 2013-09-11T10:00:00

Updated: 2024-08-06T14:57:05.091Z

Reserved: 2013-01-12T00:00:00

Link: CVE-2013-1330

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2013-09-11T14:03:48.040

Modified: 2018-10-12T22:04:17.113

Link: CVE-2013-1330

cve-icon Redhat

No data.