Microsoft SharePoint XML处理远程文件泄露漏洞
Bugtraq ID: 49511 CVE ID：CVE-2011-1892 Microsoft SharePoint Server是一款服务器功能集成套件，提供全面的内容管理和企业搜索、加速共享业务流程并便利跨界限信息共享。 Microsoft SharePoint存在文件泄露漏洞，允许恶意验证用户使用特制XML文件，以运行Sharepoint账户上下文读取SharePoint服务器上的本地文件。 Microsoft SharePoint Workspace 2010 SP1 Microsoft SharePoint Workspace 2010 0 Microsoft SharePoint Services 64-bit 3.0 SP2 Microsoft SharePoint Services 3.0 SP2 Microsoft SharePoint Server 2010 Standard Edition 0 Microsoft SharePoint Server 2010 Enterprise Edition 0 Microsoft SharePoint Server 2010 SP1 Microsoft SharePoint Server 2007 x64 SP2 Microsoft SharePoint Server 2007 SP2 Microsoft SharePoint Foundation 2010 0 Microsoft Office Web Apps 2010 SP1 Microsoft Office Web Apps 2010 0 Microsoft Office Groove Management Server 2007 SP2 Microsoft Office Groove Data Bridge Server 2007 SP2 Microsoft Office Forms Server 2007 SP2 Microsoft Groove Server 2010 SP1 Microsoft Groove Server 2010 0 Microsoft Groove 2007 SP2 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息：...
