| Package | Affected versions | Patched versions |
|---|---|---|
| sharepoint foundation | = 2010= 2013 | |
| sharepoint portal server | = 2003 | |
| sharepoint server | = 2007= 2010= 2013 | |
| sharepoint services | = 2.0= 3.0 |
Microsoft SharePoint Portal Server 2003 SP3 and SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 do not properly process unassigned workflows, which allows remote attackers to cause a denial of service (W3WP process hang) via a crafted URL, aka "SharePoint Denial of Service Vulnerability."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free