(MS12-050) Vulnerabilities in SharePoint Could Allow Elevation of Privilege (2695502)
Data de publicação: 11 julho 2012
Schweregrad: : Alto
CVE Identifier: CVE-2012-1858,CVE-2012-1859,CVE-2012-1860,CVE-2012-1861,CVE-2012-1862,CVE-2012-1863
Data do informe: 11 julho 2012
Descrição
This update resolves several vulnerabilities affecting InfoPath, SharePoint Server, SharePoint Services, SharePoint Foundation, Groove Server, and MS Office Web Apps. When exploited, the vulnerabilities may lead to any of the following:
- cross-site scripting
- elevation of privilege
- information disclosure
- URL redirection
Solução
Software infectado e versão:
- Microsoft InfoPath 2007 Service Pack 2
- Microsoft InfoPath 2007 Service Pack 3
- Microsoft InfoPath 2010 (32-bit editions)
- Microsoft InfoPath 2010 Service Pack 1 (32-bit editions)
- Microsoft InfoPath 2010 (64-bit editions)
- Microsoft InfoPath 2010 Service Pack 1 (64-bit editions)
- Microsoft Office SharePoint Server 2007 Service Pack 2 (32-bit editions)
- Microsoft Office SharePoint Server 2007 Service Pack 3 (32-bit editions)
- Microsoft Office SharePoint Server 2007 Service Pack 2 (64-bit editions)
- Microsoft Office SharePoint Server 2007 Service Pack 3 (64-bit editions)
- Microsoft SharePoint Server 2010
- Microsoft SharePoint Server 2010 Service Pack 1
- Microsoft Groove Server 2010
- Microsoft Groove Server 2010 Service Pack 1
- Microsoft Windows SharePoint Services 3.0 Service Pack 2 (32-bit version)
- Microsoft Windows SharePoint Services 3.0 Service Pack 2 (64-bit version)
- Microsoft SharePoint Foundation 2010
- Microsoft SharePoint Foundation 2010 Service Pack 1
- Microsoft Office Web Apps 2010
- Microsoft Office Web Apps 2010 Service Pack 1