CVE-2016-0021: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft InfoPath 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."...

Microsoft InfoPath Privilege Elevation Vulnerability (3104540)

This host is missing a critical security update according to Microsoft Bulletin MS15-116. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Security Update for Microsoft Office InfoPath 2007 (KB2687406)

A security vulnerability exists in Microsoft Office InfoPath 2007 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Microsoft XML Core Services CVE-2015-2440 Information Disclosure Vulnerability

Description Microsoft XML Core Services is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information that may lead to further attacks. Technologies Affected Microsoft InfoPath 2007 SP3 Microsoft Office 2007 SP2 Microsoft Office 20...

CVE-2012-2520: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Microsoft InfoPath 2007 SP2 and SP3 and 2010 SP1, Communicator 2007 R2, Lync 2010 and 2010 Attendee, SharePoint Server 2007 SP2 and SP3 and 2010 SP1, Groove Server 2010 SP1, Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010 SP1, and Office W...

MS12-066: Description of the security update for InfoPath 2007 Service Pack 3: October 9, 2012

None None...

CVE-2011-1280

The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express SSMSE 2005; and Visual Studio 2005 SP1, 2008 SP1, and 2010 does not properly handle external entities, which allows remote attackers to read arbitrar...

CVE-2011-1280: Exposure of Sensitive Information to an Unauthorized Actor

The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express SSMSE 2005; and Visual Studio 2005 SP1, 2008 SP1, and 2010 does not properly handle external entities, which allows remote attackers to read arbitrar...

CVE-2010-1257: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the toStaticHTML API, as used in Microsoft Office InfoPath 2003 SP3, 2007 SP1, and 2007 SP2; Office SharePoint Server 2007 SP1 and SP2; SharePoint Services 3.0 SP1 and SP2; and Internet Explorer 8 allows remote attackers to inject arbitrary web script or...

Update for Microsoft Office InfoPath 2007 (KB976416)

Update for Microsoft Office InfoPath 2007 KB976416...

Security Update for Microsoft Office InfoPath 2007 (KB2596786)

A security vulnerability exists in Microsoft Office InfoPath 2007 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Office InfoPath 2007 (KB2510061)

A security vulnerability exists in Microsoft Office InfoPath 2007 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Office InfoPath 2007 (KB979441)

A security vulnerability exists in Microsoft Office InfoPath 2007 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Office InfoPath 2007 (KB2687440)

A security vulnerability exists in Microsoft Office InfoPath 2007 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Security Update for Microsoft Office InfoPath 2007 (KB3114426)

A security vulnerability exists in Microsoft Office InfoPath 2007 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...