Oval Definition:	oval:org.mitre.oval:def:15689
Revision Date: 2014-12-08 Version: 9 Title: SharePoint Reflected List Parameter Vulnerability - MS12-050 Description: Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka "SharePoint Reflected List Parameter Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2012-1863 Platform(s): Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP Product(s): Microsoft SharePoint Foundation 2010 Microsoft SharePoint Server 2007 Microsoft SharePoint Services 2.0 Microsoft SharePoint Services 3.0 Definition Synopsis sharepoint services 3.0 sp2 Check if the version of Onetutil.dll is less than 12.0.6661.5000 AND Microsoft Windows SharePoint Services 3.0 SP2 is installed OR sharepoint foundation Check if the version of Onfda.dll is less than 14.0.6106.5000 AND sharepoint foundation 2010/sp1 Microsoft SharePoint Foundation 2010 Service Pack 1 is installed OR Microsoft SharePoint Foundation 2010 is installed OR sharepoint server 2007 Check if the version of Microsoft.sharepoint.publishing.dll is less than 12.0.6660.5000 AND sharepoint server 2007 sp2/sp3 Microsoft Office SharePoint Server 2007 SP2 is installed OR Microsoft Office SharePoint Server 2007 SP3 is installed OR sharepoint services 2.0/version Microsoft Windows SharePoint Services 2.0 is installed AND Check if the version of onetutil.dll is less than 11.0.8346.0
BACK