10165 matches found
Microsoft Word RTF File Use-After-Free Remote Code Execution Vulnerability
Description Microsoft Word is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user, which can lead to a complete compromise of an affected computer. Technologies Affected Microsoft Office...
MS12-067: Vulnerability in FAST Search Server 2010 for SharePoint parsing could allow remote code execution: October 9, 2012
Resolves vulnerabilities in Microsoft FAST Search Server 2010 for SharePoint when the Advanced Filter Pack is enabled that could allow remote code execution in the security context of a user account that uses a restricted token.IntroductionMicrosoft has released security bulletin MS12-067. To vie...
PT-2012-4077
Name of the Vulnerable Software and Affected Versions Microsoft InfoPath versions 2007 SP2 through 2007 SP3 Microsoft InfoPath version 2010 SP1 Microsoft Communicator version 2007 R2 Microsoft Lync versions 2010 and 2010 Attendee Microsoft SharePoint Server versions 2007 SP2 through 2007 SP3...
MS12-066: Description of the security update for SharePoint Foundation 2010 Service Pack 1: October 9, 2012
Describes the security update for SharePoint Foundation 2010 Service Pack 1 that was released on October 9, 2012.INTRODUCTIONMicrosoft has released security bulletin MS12-066. To view the complete security bulletin, go to one of the following Microsoft websites: Home...
MS12-070: Description of the security update for SQL Server 2012 GDR: October 9, 2012
None None...
Microsoft to Fix Critical Word Flaw in October Patch Tuesday
Microsoft will release seven bulletins in the October Patch Tuesday next week, fixing 20 total vulnerabilities in Windows, Office, Lync and SQL Server. Only one of the bulletins is rated critical, while the six others are rated important. The one critical bulletin affects Microsoft Office 2003,...
Microsoft Office SharePoint Server 2007 - Remote Code Execution (MS10-104) (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Microsoft Office SharePoint Server 20...
Microsoft Office SharePoint Server 2007 Remote Code Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Microsoft Office SharePoint Server 20...
Microsoft Security Advisory 2737111: Vulnerabilities in FAST Search Server 2010 for SharePoint Parsing Could Allow Remote Code Execution (deprecated)
This plugin originally checked for the workaround described in Microsoft Security Advisory 2737111, and has been deprecated due to the publication of MS12-067. Microsoft has released a patch that makes the workaround unnecessary. To check for the patch, use Nessus plugin ID xxxxx. %NASLMINLEVEL...
Microsoft Office SharePoint Server 2007 Remote Code Execution
Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core'...
Microsoft Internet Explorer 9 SharePoint Lync - toStaticHTML HTML Sanitizing Bypass (MS12-037MS12-039MS12-050)
Microsoft Internet Explorer 9 SharePoint Lync - toStaticHTML HTML Sanitizing Bypass MS12-037MS12-039MS12-050 toStaticHTML: The Second Encounter CVE-2012-1858 HTML Sanitizing Bypass - CVE-2012-1858 Original advisory -...
Microsoft Internet Explorer 9 / SharePoint / Lync - toStaticHTML HTML Sanitizing Bypass (MS12-037/MS12-039/MS12-050)
toStaticHTML: The Second Encounter CVE-2012-1858 HTML Sanitizing Bypass - CVE-2012-1858 Original advisory - http://blog.watchfire.com/wfblog/2012/07/tostatichtml-the-second-encounter-cve-2012-1858-html-sanitizing-information-disclosure-introduction-t.html Introduction The toStaticHTML component,...
Microsoft SharePoint CVE-2012-1862 URI重定向漏洞
Bugtraq ID:54315 CVE ID:CVE-2012-1862 Microsoft SharePoint Server是一款服务器功能集成套件，提供全面的内容管理和企业搜索、加速共享业务流程并便利跨界限信息共享。 Microsoft SharePoint Server存在一个开放重定向漏洞，允许攻击者通过特制URL，重定向用户到任意WEB站点，进行网络钓鱼等攻击。 0 Microsoft InfoPath 2010 Microsoft InfoPath 2007 SP2 Microsoft InfoPath 2007 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信...
Microsoft Sharepoint multiple security vulnerabilities
Crossite scripting, URL redirection...
Microsoft SharePoint 跨站脚本漏洞(CVE-2012-1863)
Bugtraq ID:54316 CVE ID:CVE-2012-1863 Microsoft SharePoint Server是一款服务器功能集成套件，提供全面的内容管理和企业搜索、加速共享业务流程并便利跨界限信息共享。 Microsoft SharePoint Server存在一个跨站脚本漏洞，允许攻击者通过URL中特制的JavaScript元素，注入任意WEB脚本或HTML，攻击者可以利用漏洞获得敏感信息或劫持用户会话。 0 Microsoft SharePoint Foundation 2010 SP1 Microsoft SharePoint Foundation 2010...
IE9 / SharePoint / Lync toStaticHTML HTML Sanitizing Bypass
Exploit for windows platform in category dos / poc toStaticHTML: The Second Encounter CVE-2012-1858 HTML Sanitizing Bypass - CVE-2012-1858 Original advisory -...
toStaticHTML HTML Sanitizing Bypass
toStaticHTML: The Second Encounter CVE-2012-1858 HTML Sanitizing Bypass - CVE-2012-1858 Original advisory - http://blog.watchfire.com/wfblog/2012/07/tostatichtml-the-second-encounter-cve-2012-1858-html-sanitizing-information-disclosure-introduction-t.html Introduction The toStaticHTML component,...
Microsoft SharePoint Multiple Privilege Elevation Vulnerabilities (2695502)
This host is missing an important security update according to Microsoft Bulletin MS12-050. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS12-050: Vulnerabilities in SharePoint Could Allow Elevation of Privilege (2695502)
The versions of InfoPath, Office SharePoint Server, SharePoint Server, Groove Server, Windows SharePoint Services, SharePoint Foundation, or Office Web Apps installed on the remote host are affected by multiple privilege escalation and information disclosure vulnerabilities : - An information...
Microsoft SharePoint 'scriptresx.ashx'跨站脚本漏洞
Bugtraq ID:54312 CVE ID:CVE-2012-1859 Microsoft SharePoint Server是一款服务器功能集成套件，提供全面的内容管理和企业搜索、加速共享业务流程并便利跨界限信息共享。 Microsoft SharePoint Server scriptresx.ashx脚本存在一个跨站脚本漏洞，允许攻击者通过在URL中构建特制JavaScript元素，注入任意WEB脚本或HTML，可获得敏感信息或劫持用户会话。 0 Microsoft SharePoint Server 2010 Standard Edition Microsoft...