(MS11-074) Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege (2451858)

Publish date: September 14, 2011
  Severity: MEDIUM
  CVE Identifier: CVE-2011-0653,CVE-2011-1252,CVE-2011-1890,CVE-2011-1891,CVE-2011-1892,CVE-2011-1893
  Advisory Date: SEP 14, 2011

  DESCRIPTION

This security update addresses five privately reported vulnerabilities and one publicly reported vulnerability Microsoft SharePoint and Windows SharePoint Services. The most severe of these could lead to elevation of privilege if a user clicks or visits a malicious website. However, users using Internet Explorer 8 and 9 are at a reduced risk, since the XSS filter in these IE versions help to block the attack.

  TREND MICRO PROTECTION INFORMATION

Trend Micro Deep Security shields networks through Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities. Please refer to the filter number and filter name when applying appropriate DPI and/or IDF rules.

  AFFECTED SOFTWARE AND VERSION

  • Microsoft Office Groove 2007 Service Pack 2
  • Microsoft SharePoint Workspace 2010 and Microsoft SharePoint Workspace 2010 Service Pack 1 (32-bit editions)
  • Microsoft SharePoint Workspace 2010 and Microsoft SharePoint Workspace 2010 Service Pack 1 (64-bit editions)
  • Microsoft Office Forms Server 2007 Service Pack 2 (32-bit editions)
  • Microsoft Office Forms Server 2007 Service Pack 2 (64-bit editions)
  • Microsoft Office SharePoint Server 2007 Service Pack 2 (32-bit editions)
  • Microsoft Office SharePoint Server 2007 Service Pack 2 (64-bit editions)
  • Microsoft Office SharePoint Server 2010 and Microsoft Office SharePoint Server 2010 Service Pack 1
  • Microsoft Office Groove Data Bridge Server 2007 Service Pack 2
  • Microsoft Office Groove Management Server 2007 Service Pack 2
  • Microsoft Groove Server 2010 and Microsoft Groove Server 2010 Service Pack 1
  • Microsoft Windows SharePoint Services 2.0
  • Microsoft Windows SharePoint Services 3.0 Service Pack 2 (32-bit versions)
  • Microsoft Windows SharePoint Services 3.0 Service Pack 2 (64-bit versions)
  • Microsoft SharePoint Foundation 2010 and Microsoft SharePoint Foundation 2010 Service Pack 1
  • Microsoft Office Web Apps 2010 and Microsoft Office Web Apps 2010 Service Pack 1

Featured Stories