CVE:CVE-2014-0251
CNNVD:CNNVD-201405-236
Microsoft Windows SharePoint Services等都是美国微软（Microsoft）公司的产品。Microsoft Windows SharePoint Services、SharePoint Server、SharePoint Foundation都是业务协作平台。Microsoft Project Server是一套适用于项目组合管理（PPM）和日常工作的项目管理解决方案。
Microsoft SharePoint Server中存在相关远程执行代码漏洞。成功利用其中任何相关漏洞的经过身份验证的攻击者可以在W3WP服务帐户的安全上下文中运行任意代码。以下软件受到影响：Microsoft Windows SharePoint Services 3.0 SP3；SharePoint Server 2007 SP3，2010 SP1和SP2，2013 Gold和SP1；SharePoint Foundation 2010 SP1和SP2，2013 Gold和SP1；Project Server 2010 SP1和SP2，2013 Gold和SP1；Web Applications 2010 SP1和SP2；Office Web Apps Server 2013 Gold和SP1；SharePoint Server 2013 Client Components SDK；SharePoint Designer 2007 SP3，2010 SP1和SP2，2013 Gold和SP1。
solution:Upgrade microsoft office_web_apps_server to a higher version than 2013,2013:sp1,and avoid the version 2013,2013:sp1; Upgrade microsoft project_server to a higher version than 2010:sp1,2010:sp2,2013,2013:sp1,and avoid the version 2010:sp1,2010:sp2,2013,2013:sp1; Upgrade microsoft sharepoint_designer to a higher version than 2007:sp3,2010:sp1,2010:sp2,2013,2013:sp1,and avoid the version 2007:sp3,2010:sp1,2010:sp2,2013,2013:sp1; Upgrade microsoft sharepoint_foundation to a higher version than 2010:sp1,2010:sp2,2013,2013:sp1,and avoid the version 2010:sp1,2010:sp2,2013,2013:sp1; Upgrade microsoft sharepoint_server to a higher version than 2007:sp3,2010:sp1,2010:sp2,2013,2013:sp1,and avoid the version 2007:sp3,2010:sp1,2010:sp2,2013,2013:sp1; Upgrade microsoft sharepoint_server_client_components_sdk to a higher version than 2013,and avoid the version 2013; Upgrade microsoft sharepoint_services to a higher version than 3.0:sp3,and avoid the version 3.0:sp3; Upgrade microsoft web_applications to a higher version than 2010:sp1,2010:sp2,and avoid the version 2010:sp1,2010:sp2