ID:4826 - Exploit for Input validation error in Microsoft SharePoint Server - CVE-2020-1444

 
Main Vulnerability Database Exploits ID:4826 - Exploit for Input validation error in Microsoft SharePoint Server - CVE-2020-1444

ID:4826 - Exploit for Input validation error in Microsoft SharePoint Server - CVE-2020-1444

Published: November 11, 2020


Vulnerability identifier: #VU29764
Vulnerability risk: High
CVE-ID: CVE-2020-1444
CWE-ID: CWE-20
Exploitation vector: Remote access
Vulnerable software:
Microsoft SharePoint Server

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to insufficient validation of user-supplied input when the Microsoft SharePoint software improperly parses specially crafted email messages. A remote attacker can send a specially crafted email, then convince the recipient to perform multiple actions while replying to the message and execute arbitrary code on the target system.


Remediation

Install updates from vendor's website.