Microsoft SharePoint Multiple Privilege Escalation Vulnerabilities (2451858)

  1. Network Vulnerabilities
  2. Windows : Microsoft Bulletins
  3. Microsoft SharePoint Multiple Privilege Escalation Vulnerabilities (2451858)
Summary
This host is missing an important security update according to Microsoft Bulletin MS11-074.
Impact
Successful exploitation could allow remote attackers to execute arbitrary code on the system with elevated privileges via a specially crafted URL or or a crafted Web site. Impact Level: System/Application
Solution
Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://www.microsoft.com/technet/security/bulletin/ms11-074.mspx
Insight
Multiple flaws are due to the way Microsoft SharePoint validates and sanitizes user input, parses malicious XML and XSL files and handles script contained inside of specific request parameter.
Affected
Microsoft Windows SharePoint Services 2.0 Microsoft Groove 2007 Service Pack 2 and prior Microsoft Office SharePoint Server 2007 Service Pack 2 Microsoft Windows SharePoint Services 3.0 Service Pack 2 Microsoft Office SharePoint Workspace 2010 Service Pack 1 and prior
References
Updated on 2015-03-25
Severity
Medium Severity
Classification
Related Vulnerabilities