(MS12-050) Vulnerabilities in SharePoint Could Allow Elevation of Privilege (2695502)
Severity: HIGH
CVE Identifier: CVE-2012-1858,CVE-2012-1859,CVE-2012-1860,CVE-2012-1861,CVE-2012-1862,CVE-2012-1863
Advisory Date: JUL 11, 2012
DESCRIPTION
This update resolves several vulnerabilities affecting InfoPath, SharePoint Server, SharePoint Services, SharePoint Foundation, Groove Server, and MS Office Web Apps. When exploited, the vulnerabilities may lead to any of the following:
- cross-site scripting
- elevation of privilege
- information disclosure
- URL redirection
SOLUTION
AFFECTED SOFTWARE AND VERSION
- Microsoft InfoPath 2007 Service Pack 2
- Microsoft InfoPath 2007 Service Pack 3
- Microsoft InfoPath 2010 (32-bit editions)
- Microsoft InfoPath 2010 Service Pack 1 (32-bit editions)
- Microsoft InfoPath 2010 (64-bit editions)
- Microsoft InfoPath 2010 Service Pack 1 (64-bit editions)
- Microsoft Office SharePoint Server 2007 Service Pack 2 (32-bit editions)
- Microsoft Office SharePoint Server 2007 Service Pack 3 (32-bit editions)
- Microsoft Office SharePoint Server 2007 Service Pack 2 (64-bit editions)
- Microsoft Office SharePoint Server 2007 Service Pack 3 (64-bit editions)
- Microsoft SharePoint Server 2010
- Microsoft SharePoint Server 2010 Service Pack 1
- Microsoft Groove Server 2010
- Microsoft Groove Server 2010 Service Pack 1
- Microsoft Windows SharePoint Services 3.0 Service Pack 2 (32-bit version)
- Microsoft Windows SharePoint Services 3.0 Service Pack 2 (64-bit version)
- Microsoft SharePoint Foundation 2010
- Microsoft SharePoint Foundation 2010 Service Pack 1
- Microsoft Office Web Apps 2010
- Microsoft Office Web Apps 2010 Service Pack 1