Launch Printer Friendly Page Security TechCenter > > Microsoft Security Bulletin MS12-050

Microsoft Security Bulletin MS12-050 - Important

Vulnerabilities in SharePoint Could Allow Elevation of Privilege (2695502)

Published: | Updated:

Version: 2.2

General Information

Executive Summary

This security update resolves one publicly disclosed and five privately reported vulnerabilities in Microsoft SharePoint and Windows SharePoint Services. The most severe vulnerabilities could allow elevation of privilege if a user clicks a specially crafted URL that takes the user to a targeted SharePoint site.

This security update is rated Important for supported editions of Microsoft InfoPath 2007, Microsoft InfoPath 2010, Microsoft SharePoint Server 2007, Microsoft SharePoint Server 2010, and Microsoft Groove Server 2010; and for supported versions of Microsoft Windows SharePoint Services 2.0, Microsoft Windows SharePoint Services 3.0, and SharePoint Foundation 2010. For more information, see the subsection, Affected and Non-Affected Software, in this section.

The security update addresses the vulnerabilities by modifying the way that HTML strings are sanitized and by correcting the way that Microsoft SharePoint validates and sanitizes user input. For more information about the vulnerabilities, see the Frequently Asked Questions (FAQ) subsection for the specific vulnerability entry under the next section, Vulnerability Information.

Recommendation. Customers can configure automatic updating to check online for updates from Microsoft Update by using the Microsoft Update service. Customers who have automatic updating enabled and configured to check online for updates from Microsoft Update typically will not need to take any action because this security update will be downloaded and installed automatically. Customers who have not enabled automatic updating need to check for updates from Microsoft Update and install this update manually. For information about specific configuration options in automatic updating in supported editions of Windows XP and Windows Server 2003, see Microsoft Knowledge Base Article 294871. For information about automatic updating in supported editions of Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2, see Understanding Windows automatic updating.

For administrators and enterprise installations, or end users who want to install this security update manually, Microsoft recommends that customers apply the update at the earliest opportunity using update management software, or by checking for updates using the Microsoft Update service.

See also the section, Detection and Deployment Tools and Guidance, later in this bulletin.

Known Issues. Microsoft Knowledge Base Article 2695502 documents the currently known issues that customers may experience when installing this security update. The article also documents recommended solutions for these issues. When currently known issues and recommended solutions pertain only to specific releases of this software, this article provides links to further articles.

Affected and Non-Affected Software

The following software have been tested to determine which versions or editions are affected. Other versions or editions are either past their support life cycle or are not affected. To determine the support life cycle for your software version or edition, visit Microsoft Support Lifecycle.

Affected Software

Microsoft Office

SoftwareMaximum Security ImpactAggregate Severity RatingUpdates Replaced
Microsoft InfoPath 2007 Service Pack 2
(KB2596666)

Microsoft InfoPath 2007 Service Pack 2
(KB2596786)
Elevation of PrivilegeImportantNone
Microsoft InfoPath 2007 Service Pack 3
(KB2596666)

Microsoft InfoPath 2007 Service Pack 3
(KB2596786)
Elevation of PrivilegeImportantNone
Microsoft InfoPath 2010 (32-bit editions)
(KB2553431)

Microsoft InfoPath 2010 (32-bit editions)
(KB2553322)
Elevation of PrivilegeImportantNone
Microsoft InfoPath 2010 Service Pack 1 (32-bit editions)
(KB2553431)

Microsoft InfoPath 2010 Service Pack 1 (32-bit editions)
(KB2553322)
Elevation of PrivilegeImportantNone
Microsoft InfoPath 2010 (64-bit editions)
(KB2553431)

Microsoft InfoPath 2010 (64-bit editions)
(KB2553322)
Elevation of PrivilegeImportantNone
Microsoft InfoPath 2010 Service Pack 1 (64-bit editions)
(KB2553431)

Microsoft InfoPath 2010 Service Pack 1 (64-bit editions)
(KB2553322)
Elevation of PrivilegeImportantNone

Microsoft Server Software

SoftwareComponent Maximum Security ImpactAggregate Severity RatingUpdates Replaced
Microsoft SharePoint Server
Microsoft Office SharePoint Server 2007 Service Pack 2 (32-bit editions)Microsoft Office SharePoint Server 2007 Service Pack 2 (coreserver) (32-bit editions)[1]
(KB2596663)

Microsoft Office SharePoint Server 2007 Service Pack 2 (xlsrvwfe) (32-bit editions)
(KB2596942)
Elevation of PrivilegeImportantKB2508964 in MS11-074 replaced by KB2596663
Microsoft Office SharePoint Server 2007 Service Pack 3 (32-bit editions)[1]Microsoft Office SharePoint Server 2007 Service Pack 3 (coreserver) (32-bit editions)[1]
(KB2596663)

Microsoft Office SharePoint Server 2007 Service Pack 3 (xlsrvwfe) (32-bit editions)
(KB2596942)
Elevation of PrivilegeImportantKB2508964 in MS11-074 replaced by KB2596663
Microsoft Office SharePoint Server 2007 Service Pack 2 (64-bit editions)[1]Microsoft Office SharePoint Server 2007 Service Pack 2 (coreserver) (64-bit editions)[1]
(KB2596663)

Microsoft Office SharePoint Server 2007 Service Pack 2 (xlsrvwfe) (64-bit editions)
(KB2596942)
Elevation of PrivilegeImportantKB2508964 in MS11-074 replaced by KB2596663
Microsoft Office SharePoint Server 2007 Service Pack 3 (64-bit editions)[1]Microsoft Office SharePoint Server 2007 Service Pack 3 (coreserver) (64-bit editions)[1]
(KB2596663)

Microsoft Office SharePoint Server 2007 Service Pack 2 (xlsrvwfe) (64-bit editions)
(KB2596942)
Elevation of PrivilegeImportantKB2508964 in MS11-074 replaced by KB2596663
Microsoft SharePoint Server 2010 Microsoft SharePoint Server 2010 (wosrv)
(KB2553424)

Microsoft SharePoint Server 2010 (coreserverloc)
(KB2553194)
Elevation of PrivilegeImportantKB2566960 in MS11-074 replaced by KB2553424

KB2566954 in MS11-074 replaced by KB2553194
Microsoft SharePoint Server 2010 Service Pack 1Microsoft SharePoint Server 2010 Service Pack 1 (wosrv)
(KB2553424)

Microsoft SharePoint Server 2010 Service Pack 1 (coreserverloc)
(KB2553194)
Elevation of PrivilegeImportantKB2566960 in MS11-074 replaced by KB2553424

KB2566954 in MS11-074 replaced by KB2553194
Microsoft Groove Server
Microsoft Groove Server 2010
(KB2589325)
Not applicableElevation of PrivilegeImportantKB2553005 in MS11-074 replaced by KB2589325
Microsoft Groove Server 2010 Service Pack 1
(KB2589325)
Not applicableElevation of PrivilegeImportantKB2553005 in MS11-074 replaced by KB2589325
Windows SharePoint Services and Microsoft SharePoint Foundation
Microsoft Windows SharePoint Services 2.0[2] 
(KB2760604)
Not applicableElevation of PrivilegeImportantKB2494007 in MS11-074 replaced by KB2760604
Microsoft Windows SharePoint Services 3.0 Service Pack 2 (32-bit version)
(KB2596911)
Not applicableElevation of PrivilegeImportantKB2493987 in MS11-074 replaced by KB2596911
Microsoft Windows SharePoint Services 3.0 Service Pack 2 (64-bit version)
(KB2596911)
Not applicableElevation of PrivilegeImportantKB2493987 in MS11-074 replaced by KB2596911
Microsoft SharePoint Foundation 2010
(KB2553365)
Not applicableElevation of PrivilegeImportantKB2494001 in MS11-074 replaced by KB2553365
Microsoft SharePoint Foundation 2010 Service Pack 1
(KB2553365)
Not applicableElevation of PrivilegeImportantKB2494001 in MS11-074 replaced by KB2553365

[1]For supported editions of Microsoft Office SharePoint Server 2007, in addition to security update packages for Microsoft Office SharePoint 2007 (KB2596663 and KB2596942), customers also need to install the security update for Microsoft Windows SharePoint Services 3.0 (KB2596911) to be protected from the vulnerabilities described in this bulletin.

[2]This update is available from the Microsoft Download Center only.

Microsoft Office Web Apps

SoftwareMaximum Security ImpactAggregate Severity RatingUpdates Replaced
Microsoft Office Web Apps 2010
(KB2598239)
Elevation of PrivilegeImportantKB2566449 in MS11-074 replaced by KB2598239
Microsoft Office Web Apps 2010 Service Pack 1
(KB2598239)
Elevation of PrivilegeImportantKB2566449 in MS11-074 replaced by KB2598239

Non-Affected Software

Office and Other Software
Microsoft SharePoint Portal Server 2003 Service Pack 3
Microsoft InfoPath 2003 Service Pack 3
Microsoft Groove 2007 Service Pack 2
Microsoft Groove 2007 Service Pack 3
Microsoft Groove Server 2007 Service Pack 2
Microsoft Groove Server 2007 Service Pack 3
Microsoft SharePoint Workspace 2010 (32-bit editions)
Microsoft SharePoint Workspace 2010 Service Pack 1 (32-bit editions)
Microsoft SharePoint Workspace 2010 (64-bit editions)
Microsoft SharePoint Workspace 2010 Service Pack 1 (64-bit editions)

Frequently Asked Questions (FAQ) Related to This Security Update

Vulnerability Information

Severity Ratings and Vulnerability Identifiers

HTML Sanitization Vulnerability - CVE-2012-1858

XSS scriptresx.ashx Vulnerability - CVE-2012-1859

SharePoint Search Scope Vulnerability - CVE-2012-1860

SharePoint Script in Username Vulnerability - CVE-2012-1861

SharePoint URL Redirection Vulnerability - CVE-2012-1862

SharePoint Reflected List Parameter Vulnerability - CVE-2012-1863

Update Information

Detection and Deployment Tools and Guidance

Security Update Deployment

Other Information

Acknowledgments

Microsoft thanks the following for working with us to help protect customers:

Microsoft Active Protections Program (MAPP)

To improve security protections for customers, Microsoft provides vulnerability information to major security software providers in advance of each monthly security update release. Security software providers can then use this vulnerability information to provide updated protections to customers via their security software or devices, such as antivirus, network-based intrusion detection systems, or host-based intrusion prevention systems. To determine whether active protections are available from security software providers, please visit the active protections websites provided by program partners, listed in Microsoft Active Protections Program (MAPP) Partners.

Support

How to obtain help and support for this security update

Disclaimer

The information provided in the Microsoft Knowledge Base is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.

Revisions

  • V1.0 (July 10, 2012): Bulletin published.
  • V1.1 (July 10, 2012): Downgraded the severity rating for the SharePoint Search Scope Vulnerability, CVE-2012-1860, from Important to Moderate for all affected software. This is an informational change only.
  • V2.0 (December 11, 2012): Rereleased this bulletin to announce availability of an update for Microsoft Windows SharePoint Services 2.0. No other update packages are affected by this rerelease.
  • V2.1 (December 12, 2012): Clarified that the update for Microsoft SharePoint Services 2.0 is available from the Microsoft Download Center only.
  • V2.2 (January 15, 2014): Bulletin revised to announce a detection change in update 2596911. This is a detection change only. Customers who have already successfully updated their systems do not need to take any action.