Microsoft SharePoint And Microsoft Lync HTML Sanitization Cross Site Scripting Vulnerability

Bugtraq ID:	55797
Class:	Input Validation Error
CVE:	CVE-2012-2520
Remote:	Yes
Local:	No
Published:	Oct 09 2012 12:00AM
Updated:	Oct 09 2012 12:00AM
Credit:	Drew Hintz of Google Security Team
Vulnerable:	Microsoft SharePoint Foundation 2010 SP1 Microsoft SharePoint Foundation 2010 0 Microsoft Office Web Apps 2010 SP1 Microsoft Office Web Apps 2010 0 Microsoft Office SharePoint Server 2010 SP1 Microsoft Office Communicator 2007 R2 Microsoft Lync 2010 Attendee 0 Microsoft InfoPath 2007 SP2 Microsoft InfoPath 2007 SP1 Microsoft Groove Server 2010 SP1 Microsoft Groove Server 2010 0
Not Vulnerable:

Microsoft SharePoint And Microsoft Lync HTML Sanitization Cross Site Scripting Vulnerability

Microsoft SharePoint and Microsoft Lync are prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to perform unauthorized actions such as issuing SharePoint commands on the SharePoint site on behalf of the victim.

Microsoft SharePoint And Microsoft Lync HTML Sanitization Cross Site Scripting Vulnerability

Attackers can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.

Microsoft SharePoint And Microsoft Lync HTML Sanitization Cross Site Scripting Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.


Microsoft InfoPath 2007 SP2

• Microsoft Security Update for Microsoft Office 2007 suites (KB2687439)
  http://www.microsoft.com/downloads/details.aspx?familyid=a0989a9f-3a7a -4343-9dd0-b2d694a0813b


• Microsoft Security Update for Microsoft Office InfoPath 2007 (KB2687440)
  http://www.microsoft.com/downloads/details.aspx?familyid=29330e1a-6bac -4c54-98ef-b9a831801247

Microsoft InfoPath 2010 SP1 (64-bit edi

• Microsoft Security Update for Microsoft InfoPath 2010 (KB2687417) 64-Bit Edition
  http://www.microsoft.com/downloads/details.aspx?familyid=6e5a7817-345e -4b75-aeca-94f74691c0e0


• Microsoft Security Update for Microsoft InfoPath 2010 (KB2687436) 64-Bit Edition
  http://www.microsoft.com/downloads/details.aspx?familyid=17b36fa3-9964 -480a-bff8-b028619c5dfd

Microsoft InfoPath 2007 SP3

• Microsoft Security Update for Microsoft Office 2007 suites (KB2687439)
  http://www.microsoft.com/downloads/details.aspx?familyid=a0989a9f-3a7a -4343-9dd0-b2d694a0813b


• Microsoft Security Update for Microsoft Office InfoPath 2007 (KB2687440)
  http://www.microsoft.com/downloads/details.aspx?familyid=29330e1a-6bac -4c54-98ef-b9a831801247

Microsoft InfoPath 2010 SP1 (32-bit edi

• Microsoft Security Update for Microsoft InfoPath 2010 (KB2687417) 32-Bit Edition
  http://www.microsoft.com/downloads/details.aspx?familyid=b0be62c6-4eae -458e-8cf5-754742393e4c


• Microsoft Security Update for Microsoft InfoPath 2010 (KB2687436) 32-Bit Edition
  http://www.microsoft.com/downloads/details.aspx?familyid=724b12b9-84bf -4102-912e-56aa9ee0878c

Microsoft SharePoint And Microsoft Lync HTML Sanitization Cross Site Scripting Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• SharePoint Server Homepage (Microsoft)