(MS12-011) Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege (2663841)

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

  Severity: HIGH

  CVE Identifier: CVE-2012-0017,CVE-2012-0144,CVE-2012-0145

  Advisory Date: FEB 15, 2012

---

  DESCRIPTION

This security update resolves three privately reported vulnerabilities in Microsoft SharePoint and Microsoft SharePoint Foundation. These vulnerabilities could allow elevation of privilege or information disclosure if a user clicks a specially crafted URL.

  SOLUTION

  PATCH: http://technet.microsoft.com/en-us/security/bulletin/ms12-011

  AFFECTED SOFTWARE AND VERSION

• Microsoft SharePoint Server (Microsoft SharePoint Server 2010 and Microsoft SharePoint Server 2010 Service Pack 1)
• Microsoft SharePoint Foundation (Microsoft SharePoint Foundation 2010 and Microsoft SharePoint Foundation 2010 Service Pack 1)

Related Vulnerability

• February 2012- Microsoft Releases 9 Security Advisories