(MS12-050) Vulnerabilities in SharePoint Could Allow Elevation of Privilege (2695502)

Publish date: July 11, 2012
  Severity: HIGH
  CVE Identifier: CVE-2012-1858,CVE-2012-1859,CVE-2012-1860,CVE-2012-1861,CVE-2012-1862,CVE-2012-1863
  Advisory Date: JUL 11, 2012

  DESCRIPTION

This update resolves several vulnerabilities affecting InfoPath, SharePoint Server, SharePoint Services, SharePoint Foundation, Groove Server, and MS Office Web Apps. When exploited, the vulnerabilities may lead to any of the following:

  • cross-site scripting
  • elevation of privilege
  • information disclosure
  • URL redirection

  SOLUTION

  AFFECTED SOFTWARE AND VERSION

  • Microsoft InfoPath 2007 Service Pack 2
  • Microsoft InfoPath 2007 Service Pack 3
  • Microsoft InfoPath 2010 (32-bit editions)
  • Microsoft InfoPath 2010 Service Pack 1 (32-bit editions)
  • Microsoft InfoPath 2010 (64-bit editions)
  • Microsoft InfoPath 2010 Service Pack 1 (64-bit editions)
  • Microsoft Office SharePoint Server 2007 Service Pack 2 (32-bit editions)
  • Microsoft Office SharePoint Server 2007 Service Pack 3 (32-bit editions)
  • Microsoft Office SharePoint Server 2007 Service Pack 2 (64-bit editions)
  • Microsoft Office SharePoint Server 2007 Service Pack 3 (64-bit editions)
  • Microsoft SharePoint Server 2010
  • Microsoft SharePoint Server 2010 Service Pack 1
  • Microsoft Groove Server 2010
  • Microsoft Groove Server 2010 Service Pack 1
  • Microsoft Windows SharePoint Services 3.0 Service Pack 2 (32-bit version)
  • Microsoft Windows SharePoint Services 3.0 Service Pack 2 (64-bit version)
  • Microsoft SharePoint Foundation 2010
  • Microsoft SharePoint Foundation 2010 Service Pack 1
  • Microsoft Office Web Apps 2010
  • Microsoft Office Web Apps 2010 Service Pack 1

Featured Stories