This host is missing an important security update according to Microsoft Bulletin MS13-100.

Successful exploitation will allow attackers to execute arbitrary code with the privileges of the W3WP service account. Impact Level: Application

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://technet.microsoft.com/en-us/security/bulletin/ms13-100

Flaws is due to some input sanitisation errors related to SharePoint content

Microsoft Business Productivity Servers on, - Microsoft SharePoint Server 2010 Service Pack 1 - Microsoft SharePoint Server 2010 Service Pack 2 - Microsoft SharePoint 2013

Get the vulnerable file version and check appropriate patch is applied or not.

• http://secunia.com/advisories/55985
• http://technet.microsoft.com/en-us/security/bulletin/MS13-100
• http://www.osvdb.com/100767

---

Updated on 2015-03-25