logo
DATABASE RESOURCES PRICING ABOUT US

MS12-050: Vulnerabilities in SharePoint Could Allow Elevation of Privilege (2695502)

2012-07-11T00:00:00

Description

The versions of InfoPath, Office SharePoint Server, SharePoint Server, Groove Server, Windows SharePoint Services, SharePoint Foundation, or Office Web Apps installed on the remote host are affected by multiple privilege escalation and information disclosure vulnerabilities : - An information disclosure vulnerability exists in the way that HTML strings are sanitized. An attacker who successfully exploited this vulnerability could perform cross-site scripting attacks and run script in the security context of the logged-on user. (CVE-2012-1858) - A cross-site scripting and a privilege escalation vulnerability allow attacker-controlled JavaScript to run in the context of the user clicking a link. An anonymous attacker could also potentially issue SharePoint commands in the context of an authenticated user on the site. (CVE-2012-1859) - An information disclosure vulnerability exists in the way that SharePoint stores search scopes. An attacker could view or tamper with other users' search scopes. (CVE-2012-1860) - A cross-site scripting vulnerability exists that allows attacker-controlled JavaScript to run in the context of the user clicking a link. An anonymous attacker could also potentially issue SharePoint commands in the context of an authenticated user. (CVE-2012-1861) - A URL redirection vulnerability exists in SharePoint. The vulnerability could lead to spoofing and information disclosure and could allow an attacker to redirect a user to an external URL. (CVE-2012-1862) - A cross-site scripting vulnerability exists that allows attacker-controlled JavaScript to run in the context of the user clicking a link. An anonymous attacker could also potentially issue SharePoint commands in the context of an authenticated user. (CVE-2012-1863).


Related


mskb
microsoft

MS12-050: Vulnerabilities in SharePoint could allow elevation of privilege: July 10, 2012

2012-07-10T00:00:00
mskb
microsoft

MS12-037: Cumulative Security Update for Internet Explorer: June 12, 2012

2012-06-12T00:00:00
openvas
scanner

Microsoft SharePoint Multiple Privilege Elevation Vulnerabilities (2695502)

2012-07-11T00:00:00
openvas
scanner

Microsoft Lync Remote Code Execution Vulnerabilities (2707956)

2012-06-13T00:00:00
openvas
scanner

Microsoft Lync Remote Code Execution Vulnerabilities (2707956)

2012-06-13T00:00:00
openvas
scanner

Microsoft Internet Explorer Multiple Vulnerabilities (2699988)

2012-06-13T00:00:00
openvas
scanner

Microsoft Internet Explorer Multiple Vulnerabilities (2699988)

2012-06-13T00:00:00
securityvulns
software

Microsoft Sharepoint multiple security vulnerabilities

2012-07-11T00:00:00
securityvulns
software

Mictosoft Lync multiple security vulnerabilities

2012-06-13T00:00:00
securityvulns
software

Microsoft Internet Explorer multiple security vulnerabilities

2012-06-25T00:00:00
checkpoint_advisories
info

Microsoft SharePoint XSS scriptresx.ashx Elevation of Privilege (MS12-050; CVE-2012-1859)

2012-07-10T00:00:00
checkpoint_advisories
info

Microsoft SharePoint Script in Username Cross-site Scripting (MS12-050; CVE-2012-1861)

2012-07-10T00:00:00
checkpoint_advisories
info

Microsoft SharePoint Reflected List Parameter XSS (MS12-050; CVE-2012-1863)

2012-07-10T00:00:00
checkpoint_advisories
info

Microsoft SharePoint Reflected List Parameter Cross-site Scripting (SA49875; CVE-2012-1863)

2013-03-12T00:00:00
checkpoint_advisories
info

Preemptive Protection against Microsoft SharePoint HTML Sanitization Cross-site Scripting (MS12-050; CVE-2012-1858)

2012-07-10T00:00:00
checkpoint_advisories
info

Microsoft Internet Explorer HTML Sanitization Information Disclosure (MS12-037) - Ver2 (CVE-2012-1858)

2015-05-18T00:00:00
checkpoint_advisories
info

Internet Explorer HTML Sanitization Information Disclosure (MS12-039; CVE-2012-1858)

2012-06-12T00:00:00
seebug
exploit

Microsoft SharePoint 'scriptresx.ashx'跨站脚本漏洞

2012-07-11T00:00:00
seebug
exploit

Microsoft SharePoint 跨站脚本漏洞(CVE-2012-1863)

2012-07-11T00:00:00
seebug
exploit

Microsoft SharePoint CVE-2012-1862 URI重定向漏洞

2012-07-11T00:00:00
seebug
exploit

IE9, SharePoint, Lync toStaticHTML HTML Sanitizing Bypass

2014-07-01T00:00:00
seebug
exploit

Microsoft Lync/Office Communicator HTML代码过滤漏洞 (CVE-2012-1858) (MS12-039)

2012-06-13T00:00:00
cve
NVD

CVE-2012-1859

2012-07-10T21:55:00
cve
NVD

CVE-2012-1861

2012-07-10T21:55:00
cve
NVD

CVE-2012-1863

2012-07-10T21:55:00
cve
NVD

CVE-2012-1862

2012-07-10T21:55:00
cve
NVD

CVE-2012-1858

2012-06-12T22:55:00
cve
NVD

CVE-2012-1860

2012-07-10T21:55:00
symantec
software

Microsoft SharePoint CVE-2012-1861 HTML Injection Vulnerability

2012-07-10T00:00:00
symantec
software

Microsoft SharePoint CVE-2012-1863 Cross Site Scripting Vulnerability

2012-07-10T00:00:00
symantec
software

Microsoft SharePoint CVE-2012-1862 URI Redirection Vulnerability

2012-07-10T00:00:00
symantec
software

Microsoft Internet Explorer And Microsoft Lync HTML Sanitizing Information Disclosure Vulnerability

2012-06-12T00:00:00
packetstorm
exploit

toStaticHTML HTML Sanitizing Bypass

2012-07-11T00:00:00
exploitpack
exploit

Microsoft Internet Explorer 9 SharePoint Lync - toStaticHTML HTML Sanitizing Bypass (MS12-037MS12-039MS12-050)

2012-07-12T00:00:00
exploitdb
exploit

Microsoft Internet Explorer 9 / SharePoint / Lync - toStaticHTML HTML Sanitizing Bypass (MS12-037/MS12-039/MS12-050)

2012-07-12T00:00:00
threatpost
info

Serious Remote PHP Bug Accidentally Disclosed

2012-05-03T14:09:27
threatpost
info

PHP Group Releases New Versions, But Patch Doesn't Fix CVE-2012-1823 Bug

2012-05-04T14:26:46
threatpost
info

Another Set of PHP Releases Pushed Out to Fix CVE-2012-1823 Flaw

2012-05-09T14:32:23
nessus
scanner

MS12-039: Vulnerabilities in Lync Could Allow Remote Code Execution (2707956)

2012-06-13T00:00:00
nessus
scanner

MS12-037: Cumulative Security Update for Internet Explorer (2699988)

2012-06-13T00:00:00