PT-2011-3016

Name of the Vulnerable Software and Affected Versions Microsoft InfoPath versions 2007 SP2 through 2010 SQL Server versions 2005 SP3 through 2008 R2 SQL Server Management Studio Express SSMSE version 2005 Visual Studio versions 2005 SP1 through 2010 Description An issue exists in the way Microsof...

CVE-2011-1280: Exposure of Sensitive Information to an Unauthorized Actor

The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express SSMSE 2005; and Visual Studio 2005 SP1, 2008 SP1, and 2010 does not properly handle external entities, which allows remote attackers to read arbitrar...