(MS12-050) Vulnerabilities in SharePoint Could Allow Elevation of Privilege (2695502)
Publish Date: 11 luglio 2012
Gravità: : Alto
CVE Identifier: CVE-2012-1858,CVE-2012-1859,CVE-2012-1860,CVE-2012-1861,CVE-2012-1862,CVE-2012-1863
Data notifica: 11 luglio 2012
Descrizione
This update resolves several vulnerabilities affecting InfoPath, SharePoint Server, SharePoint Services, SharePoint Foundation, Groove Server, and MS Office Web Apps. When exploited, the vulnerabilities may lead to any of the following:
- cross-site scripting
- elevation of privilege
- information disclosure
- URL redirection
Soluzioni
Software e versione interessati:
- Microsoft InfoPath 2007 Service Pack 2
- Microsoft InfoPath 2007 Service Pack 3
- Microsoft InfoPath 2010 (32-bit editions)
- Microsoft InfoPath 2010 Service Pack 1 (32-bit editions)
- Microsoft InfoPath 2010 (64-bit editions)
- Microsoft InfoPath 2010 Service Pack 1 (64-bit editions)
- Microsoft Office SharePoint Server 2007 Service Pack 2 (32-bit editions)
- Microsoft Office SharePoint Server 2007 Service Pack 3 (32-bit editions)
- Microsoft Office SharePoint Server 2007 Service Pack 2 (64-bit editions)
- Microsoft Office SharePoint Server 2007 Service Pack 3 (64-bit editions)
- Microsoft SharePoint Server 2010
- Microsoft SharePoint Server 2010 Service Pack 1
- Microsoft Groove Server 2010
- Microsoft Groove Server 2010 Service Pack 1
- Microsoft Windows SharePoint Services 3.0 Service Pack 2 (32-bit version)
- Microsoft Windows SharePoint Services 3.0 Service Pack 2 (64-bit version)
- Microsoft SharePoint Foundation 2010
- Microsoft SharePoint Foundation 2010 Service Pack 1
- Microsoft Office Web Apps 2010
- Microsoft Office Web Apps 2010 Service Pack 1