This host is missing an important security update according to Microsoft Bulletin MS12-066.

Successful exploitation could allow an attacker to bypass certain security restrictions and conduct cross-site scripting and spoofing attacks. Impact Level: Application

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://technet.microsoft.com/en-us/security/bulletin/ms12-066

Certain unspecified input is not properly sanitised within the HTML Sanitisation component before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

Microsoft Lync 2010 Microsoft Lync 2010 Attendee Microsoft Communicator 2007 R2 Microsoft InfoPath 2007 Service Pack 2 Microsoft InfoPath 2007 Service Pack 3 Microsoft InfoPath 2010 Service Pack 1 Microsoft Groove Server 2010 Service Pack 1 Microsoft Office Web Apps 2010 Service Pack 1 Microsoft SharePoint Server 2010 Service Pack 1 Microsoft SharePoint Server 2007 Service Pack 2 Microsoft SharePoint Server 2007 Service Pack 3 Microsoft SharePoint Foundation 2010 Service Pack 1 Microsoft Windows SharePoint Services 3.0 Service Pack 2

• http://packetstormsecurity.org/files/117220/sa50855.txt
• http://support.microsoft.com/kb/2687439
• http://support.microsoft.com/kb/2687440
• http://technet.microsoft.com/en-us/security/bulletin/ms12-066

---

Updated on 2015-03-25