CVE-2011-1280

The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express SSMSE 2005; and Visual Studio 2005 SP1, 2008 SP1, and 2010 does not properly handle external entities, which allows remote attackers to read arbitrar...

Xxe

The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express SSMSE 2005; and Visual Studio 2005 SP1, 2008 SP1, and 2010 does not properly handle external entities, which allows remote attackers to read arbitrar...

CVE-2011-1280

CVE-2011-1280 is the XML External Entities Resolution vulnerability affecting Microsoft XML Editor components used with InfoPath 2007 SP2/2010, SQL Server 2005 SP3/4, 2008 SP1/2/R2, SSMSE 2005, and Visual Studio 2005 SP1/2008 SP1/2010. Technical detail from connected documents shows that the issu...

Internet Explorer and SharePoint 'toStaticHTML' Cross Domain Information Disclosure Vulnerability

Description Microsoft Internet Explorer and Microsoft SharePoint are prone to a cross-domain information-disclosure vulnerability because they fail to properly enforce the same-origin policy. An attacker can exploit this issue to access local files or content from a browser window in another doma...

Microsoft Office不安全文档签名漏洞

Microsoft Office 2007是一款微软开发的流行的办公处理应用程序。 Microsoft Office 2007不安全对基于XML文档的签名，远程攻击者可以利用漏洞伪造签名，使目标用户盲目信任文档。 Microsoft Office文档根据文件中docProps/core.xml的DublinCore metadata来携带META数据信息，在这些META数据信息中"LastModifiedBy", "creator"字段可通过"Office Button - Prepare -...

Security Update for Microsoft InfoPath 2010 (KB2878230) 64-Bit Edition

A security vulnerability exists in Microsoft InfoPath 2010 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft InfoPath 2010 (KB2878230) 32-Bit Edition

A security vulnerability exists in Microsoft InfoPath 2010 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft InfoPath 2013 (KB3054793) 32-Bit Edition

A security vulnerability exists in Microsoft InfoPath 2013 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft InfoPath 2013 (KB3054793) 64-Bit Edition

A security vulnerability exists in Microsoft InfoPath 2013 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft InfoPath 2010 (KB2687422) 64-Bit Edition

A security vulnerability exists in Microsoft InfoPath 2010 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft InfoPath 2010 (KB2687417) 32-Bit Edition

A security vulnerability exists in Microsoft InfoPath 2010 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft InfoPath 2010 (KB2510065), 64-Bit Edition

A security vulnerability exists in Microsoft InfoPath 2010, 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft InfoPath 2010 (KB2687417) 64-Bit Edition

A security vulnerability exists in Microsoft InfoPath 2010 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft InfoPath 2010 (KB2553322) 64-Bit Edition

A security vulnerability exists in Microsoft InfoPath 2010 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft InfoPath 2013 (KB3162075) 64-Bit Edition

A security vulnerability exists in Microsoft InfoPath 2013 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft InfoPath 2013 (KB3162075) 32-Bit Edition

A security vulnerability exists in Microsoft InfoPath 2013 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft InfoPath 2010 (KB2687422) 32-Bit Edition

A security vulnerability exists in Microsoft InfoPath 2010 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft InfoPath 2010 (KB2760406) 64-Bit Edition

A security vulnerability exists in Microsoft InfoPath 2010 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft InfoPath 2010 (KB2760406) 32-Bit Edition

A security vulnerability exists in Microsoft InfoPath 2010 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft InfoPath 2013 (KB3114833) 32-Bit Edition

A security vulnerability exists in Microsoft InfoPath 2013 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...