MS11-074：Microsoft SharePoint の脆弱性により、特権が昇格される (2451858)
2011年9月14日
危険度: : 中
CVE Identifier: CVE-2011-0653,CVE-2011-1252,CVE-2011-1890,CVE-2011-1891,CVE-2011-1892,CVE-2011-1893
概要
This security update addresses five privately reported vulnerabilities and one publicly reported vulnerability Microsoft SharePoint and Windows SharePoint Services. The most severe of these could lead to elevation of privilege if a user clicks or visits a malicious website. However, users using Internet Explorer 8 and 9 are at a reduced risk, since the XSS filter in these IE versions help to block the attack.
トレンドマイクロの対策
詳しい情報については以下のサイトをご参照ください。
影響を受けるソフトウェア
- Microsoft Office Groove 2007 Service Pack 2
- Microsoft SharePoint Workspace 2010 and Microsoft SharePoint Workspace 2010 Service Pack 1 (32-bit editions)
- Microsoft SharePoint Workspace 2010 and Microsoft SharePoint Workspace 2010 Service Pack 1 (64-bit editions)
- Microsoft Office Forms Server 2007 Service Pack 2 (32-bit editions)
- Microsoft Office Forms Server 2007 Service Pack 2 (64-bit editions)
- Microsoft Office SharePoint Server 2007 Service Pack 2 (32-bit editions)
- Microsoft Office SharePoint Server 2007 Service Pack 2 (64-bit editions)
- Microsoft Office SharePoint Server 2010 and Microsoft Office SharePoint Server 2010 Service Pack 1
- Microsoft Office Groove Data Bridge Server 2007 Service Pack 2
- Microsoft Office Groove Management Server 2007 Service Pack 2
- Microsoft Groove Server 2010 and Microsoft Groove Server 2010 Service Pack 1
- Microsoft Windows SharePoint Services 2.0
- Microsoft Windows SharePoint Services 3.0 Service Pack 2 (32-bit versions)
- Microsoft Windows SharePoint Services 3.0 Service Pack 2 (64-bit versions)
- Microsoft SharePoint Foundation 2010 and Microsoft SharePoint Foundation 2010 Service Pack 1
- Microsoft Office Web Apps 2010 and Microsoft Office Web Apps 2010 Service Pack 1