(MS12-011) Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege (2663841)

  Severity: HIGH
  CVE Identifier: CVE-2012-0017,CVE-2012-0144,CVE-2012-0145
  Advisory Date: FEB 15, 2012

  DESCRIPTION

This security update resolves three privately reported vulnerabilities in Microsoft SharePoint and Microsoft SharePoint Foundation. These vulnerabilities could allow elevation of privilege or information disclosure if a user clicks a specially crafted URL.

  SOLUTION

  AFFECTED SOFTWARE AND VERSION

  • Microsoft SharePoint Server (Microsoft SharePoint Server 2010 and Microsoft SharePoint Server 2010 Service Pack 1)
  • Microsoft SharePoint Foundation (Microsoft SharePoint Foundation 2010 and Microsoft SharePoint Foundation 2010 Service Pack 1)