(MS12-011) Vulnerabilities in Microsoft SharePoint Could Allow Elevation of Privilege (2663841)
Publish Date: 15 de lutego de 2012
Severity: : High
CVE Kennungen: : CVE-2012-0017,CVE-2012-0144,CVE-2012-0145
Advisory Date: 15 de lutego de 2012
DESCRIPTION
This security update resolves three privately reported vulnerabilities in Microsoft SharePoint and Microsoft SharePoint Foundation. These vulnerabilities could allow elevation of privilege or information disclosure if a user clicks a specially crafted URL.
SOLUTION
AFFECTED SOFTWARE AND VERSION:
- Microsoft SharePoint Server (Microsoft SharePoint Server 2010 and Microsoft SharePoint Server 2010 Service Pack 1)
- Microsoft SharePoint Foundation (Microsoft SharePoint Foundation 2010 and Microsoft SharePoint Foundation 2010 Service Pack 1)