MS12-050：SharePoint の脆弱性により、特権が昇格される (2695502)
2012年7月11日
危険度: : 高
CVE Identifier: CVE-2012-1858,CVE-2012-1859,CVE-2012-1860,CVE-2012-1861,CVE-2012-1862,CVE-2012-1863
概要
This update resolves several vulnerabilities affecting InfoPath, SharePoint Server, SharePoint Services, SharePoint Foundation, Groove Server, and MS Office Web Apps. When exploited, the vulnerabilities may lead to any of the following:
- cross-site scripting
- elevation of privilege
- information disclosure
- URL redirection
トレンドマイクロの対策
詳しい情報については以下のサイトをご参照ください。
影響を受けるソフトウェア
- Microsoft InfoPath 2007 Service Pack 2
- Microsoft InfoPath 2007 Service Pack 3
- Microsoft InfoPath 2010 (32-bit editions)
- Microsoft InfoPath 2010 Service Pack 1 (32-bit editions)
- Microsoft InfoPath 2010 (64-bit editions)
- Microsoft InfoPath 2010 Service Pack 1 (64-bit editions)
- Microsoft Office SharePoint Server 2007 Service Pack 2 (32-bit editions)
- Microsoft Office SharePoint Server 2007 Service Pack 3 (32-bit editions)
- Microsoft Office SharePoint Server 2007 Service Pack 2 (64-bit editions)
- Microsoft Office SharePoint Server 2007 Service Pack 3 (64-bit editions)
- Microsoft SharePoint Server 2010
- Microsoft SharePoint Server 2010 Service Pack 1
- Microsoft Groove Server 2010
- Microsoft Groove Server 2010 Service Pack 1
- Microsoft Windows SharePoint Services 3.0 Service Pack 2 (32-bit version)
- Microsoft Windows SharePoint Services 3.0 Service Pack 2 (64-bit version)
- Microsoft SharePoint Foundation 2010
- Microsoft SharePoint Foundation 2010 Service Pack 1
- Microsoft Office Web Apps 2010
- Microsoft Office Web Apps 2010 Service Pack 1