PT-2011-2990 · Microsoft · Office Sharepoint Server+5

Published 2011-06-16 · Updated 2025-01-21 · CVE-2011-1252

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 7 through 8 Office SharePoint Server versions 2007 SP2 through 2010 SP1 Groove Server versions 2010 Gold through 2010 SP1 Windows SharePoint Services version 3.0 SP2 SharePoint Foundation versions 2010 Gold through 2010 SP1

Description The issue is related to an information disclosure vulnerability in the way the SafeHTML function sanitizes HTML, allowing remote attackers to inject arbitrary web script or HTML via unspecified strings. This could enable cross-site scripting attacks, allowing an attacker to run script in the security context of the logged-on user. An attacker could exploit the vulnerability by constructing a specially crafted Web page, potentially leading to information disclosure if a user views the Web page.

Recommendations For Microsoft Internet Explorer versions 7 through 8, update to a version that includes the fix for the toStaticHTML API. For Office SharePoint Server versions 2007 SP2 through 2010 SP1, apply the recommended configuration changes to the SafeHTML function. For Groove Server versions 2010 Gold through 2010 SP1, restrict access to the toStaticHTML API until a patch is available. For Windows SharePoint Services version 3.0 SP2, consider disabling the SafeHTML function as a temporary workaround. For SharePoint Foundation versions 2010 Gold through 2010 SP1, avoid using the toStaticHTML API in sensitive areas of the application until the issue is resolved.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2011-1252

Affected Products

Groove Server

Internet Explorer

Office Sharepoint Server

Sharepoint Foundation

Sharepoint Server

Windows Sharepoint Services

References · 9

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1252 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-074 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-050 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1252 · Security Note
• http://us-cert.gov/cas/techalerts/TA11-256A.html · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2011/MS11-050 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12885 · Note
• http://technet.microsoft.com/en-us/security/bulletin/MS11-074 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12577 · Note