certfr_avis - certa-2011-avi-357

CERTA-2011-AVI-357

Vulnerability from certfr_avis - Published: - Updated:

Une vulnérabilité dans l'éditeur XML de Microsoft permet à un utilisateur distant de porter atteinte à la confidentialité de certaines données.

Description

Une vulnérabilité est présente dans l'éditeur de fichiers XML de Microsoft inclus dans de nombreux logiciels comme SQL Server ou Visual Studio. Elle permet à un utilisateur distant malintentionné de porter atteinte à la confidentialité de certaines données au moyen d'un fichier Web Service Discovery (.disco) construit de façon particulière.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Microsoft	N/A	Microsoft SQL Server Management Studio Express (SSMSE) 2005 ;
Microsoft	N/A	Microsoft SQL Server 2005 Édition x64 Service Pack 4 ;
Microsoft	N/A	Microsoft SQL Server 2008 pour systèmes x64 Service Pack 2 ;
Microsoft	N/A	Microsoft SQL Server 2008 R2 pour systèmes Itanium ;
Microsoft	N/A	Microsoft SQL Server 2005 Express Edition with Advanced Services Service Pack 3 ;
Microsoft	N/A	Microsoft InfoPath 2007 Service Pack 2 ;
Microsoft	N/A	Microsoft SQL Server 2008 pour systèmes Itanium Service Pack 1 ;
Microsoft	N/A	Microsoft SQL Server 2005 Express Edition Service Pack 4 ;
Microsoft	N/A	Microsoft SQL Server 2005 Express Edition with Advanced Services Service Pack 4 ;
Microsoft	N/A	Microsoft SQL Server 2008 R2 pour systèmes 32 bits ;
Microsoft	N/A	Microsoft SQL Server 2005 Édition x64 Service Pack 3 ;
Microsoft	N/A	Microsoft SQL Server 2008 pour systèmes 32 bits Service Pack 2 ;
Microsoft	N/A	Microsoft InfoPath 2010 (éditions 32 bits) ;
Microsoft	N/A	Microsoft Visual Studio 2010.
Microsoft	N/A	Microsoft SQL Server 2005 Service Pack 4 ;
Microsoft	N/A	Microsoft InfoPath 2010 (éditions 64 bits) ;
Microsoft	N/A	Microsoft SQL Server 2005 Service Pack 3 pour systèmes Itanium ;
Microsoft	N/A	Microsoft SQL Server 2005 Service Pack 3 ;
Microsoft	N/A	Microsoft SQL Server 2005 Express Edition Service Pack 3 ;
Microsoft	N/A	Microsoft SQL Server 2005 pour systèmes Itanium Service Pack 4 ;
Microsoft	N/A	Microsoft SQL Server 2008 pour systèmes 32 bits Service Pack 1 ;
Microsoft	N/A	Microsoft SQL Server Management Studio Express (SSMSE) 2005 édition x64 ;
Microsoft	N/A	Microsoft SQL Server 2008 pour systèmes x64 Service Pack 1 ;
Microsoft	N/A	Microsoft Visual Studio 2005 Service Pack 1 ;
Microsoft	N/A	Microsoft SQL Server 2008 pour systèmes Itanium Service Pack 2 ;
Microsoft	N/A	Microsoft SQL Server 2008 R2 pour systèmes x64 ;
Microsoft	N/A	Microsoft Visual Studio 2008 Service Pack 1 ;

References

Title

Publication Time

Tags

Bulletin de sécurité Microsoft MS11-049 du 14 juin 2011

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft SQL Server Management Studio Express (SSMSE) 2005 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2005 \u00c9dition x64 Service Pack 4 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2008 pour syst\u00e8mes x64 Service Pack 2 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2008 R2 pour syst\u00e8mes Itanium ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2005 Express Edition with Advanced Services Service Pack 3 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft InfoPath 2007 Service Pack 2 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2008 pour syst\u00e8mes Itanium Service Pack 1 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2005 Express Edition Service Pack 4 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2005 Express Edition with Advanced Services Service Pack 4 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2008 R2 pour syst\u00e8mes 32 bits ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2005 \u00c9dition x64 Service Pack 3 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2008 pour syst\u00e8mes 32 bits Service Pack 2 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft InfoPath 2010 (\u00e9ditions 32 bits) ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2010.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2005 Service Pack 4 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft InfoPath 2010 (\u00e9ditions 64 bits) ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2005 Service Pack 3 pour syst\u00e8mes Itanium ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2005 Service Pack 3 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2005 Express Edition Service Pack 3 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2005 pour syst\u00e8mes Itanium Service Pack 4 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2008 pour syst\u00e8mes 32 bits Service Pack 1 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server Management Studio Express (SSMSE) 2005 \u00e9dition x64 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2008 pour syst\u00e8mes x64 Service Pack 1 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2005 Service Pack 1 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2008 pour syst\u00e8mes Itanium Service Pack 2 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft SQL Server 2008 R2 pour syst\u00e8mes x64 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Visual Studio 2008 Service Pack 1 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 est pr\u00e9sente dans l\u0027\u00e9diteur de fichiers XML de\nMicrosoft inclus dans de nombreux logiciels comme SQL Server ou Visual\nStudio. Elle permet \u00e0 un utilisateur distant malintentionn\u00e9 de porter\natteinte \u00e0 la confidentialit\u00e9 de certaines donn\u00e9es au moyen d\u0027un fichier\nWeb Service Discovery (.disco) construit de fa\u00e7on particuli\u00e8re.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2011-1280",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-1280"
    }
  ],
  "links": [],
  "reference": "CERTA-2011-AVI-357",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2011-06-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 dans l\u0027\u00e9diteur XML de Microsoft permet \u00e0 un\nutilisateur distant de porter atteinte \u00e0 la confidentialit\u00e9 de certaines\ndonn\u00e9es.\n",
  "title": "Vuln\u00e9rabilit\u00e9 de l\u0027\u00e9diteur XML de Microsoft",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS11-049 du 14 juin 2011",
      "url": "http://www.microsoft.com/technet/security/Bulletin/MS11-049.mspx"
    }
  ]
}

CVE-2011-1280 (GCVE-0-2011-1280)

Vulnerability from cvelistv5 – Published: 2011-06-16 20:21 – Updated: 2024-08-06 22:21

Summary

The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express (SSMSE) 2005; and Visual Studio 2005 SP1, 2008 SP1, and 2010 does not properly handle external entities, which allows remote attackers to read arbitrary files via a crafted .disco (Web Service Discovery) file, aka "XML External Entities Resolution Vulnerability."

Severity ?

No CVSS data available.

CWE

Assigner

microsoft

References

URL

Tags

	http://www.securityfocus.com/bid/48196	vdb-entryx_refsource_BID
	http://www.securitytracker.com/id?1025647	vdb-entryx_refsource_SECTRACK
	http://www.securitytracker.com/id?1025648	vdb-entryx_refsource_SECTRACK
	https://docs.microsoft.com/en-us/security-updates…	vendor-advisoryx_refsource_MS
	http://www.securitytracker.com/id?1025646	vdb-entryx_refsource_SECTRACK
	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	http://secunia.com/advisories/44912	third-party-advisoryx_refsource_SECUNIA

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T22:21:34.188Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "48196",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/48196"
          },
          {
            "name": "1025647",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1025647"
          },
          {
            "name": "1025648",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1025648"
          },
          {
            "name": "MS11-049",
            "tags": [
              "vendor-advisory",
              "x_refsource_MS",
              "x_transferred"
            ],
            "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-049"
          },
          {
            "name": "1025646",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1025646"
          },
          {
            "name": "oval:org.mitre.oval:def:12664",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12664"
          },
          {
            "name": "44912",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/44912"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-06-14T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express (SSMSE) 2005; and Visual Studio 2005 SP1, 2008 SP1, and 2010 does not properly handle external entities, which allows remote attackers to read arbitrary files via a crafted .disco (Web Service Discovery) file, aka \"XML External Entities Resolution Vulnerability.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-12T19:57:01",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "48196",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/48196"
        },
        {
          "name": "1025647",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1025647"
        },
        {
          "name": "1025648",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1025648"
        },
        {
          "name": "MS11-049",
          "tags": [
            "vendor-advisory",
            "x_refsource_MS"
          ],
          "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-049"
        },
        {
          "name": "1025646",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1025646"
        },
        {
          "name": "oval:org.mitre.oval:def:12664",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12664"
        },
        {
          "name": "44912",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/44912"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@microsoft.com",
          "ID": "CVE-2011-1280",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express (SSMSE) 2005; and Visual Studio 2005 SP1, 2008 SP1, and 2010 does not properly handle external entities, which allows remote attackers to read arbitrary files via a crafted .disco (Web Service Discovery) file, aka \"XML External Entities Resolution Vulnerability.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "48196",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/48196"
            },
            {
              "name": "1025647",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1025647"
            },
            {
              "name": "1025648",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1025648"
            },
            {
              "name": "MS11-049",
              "refsource": "MS",
              "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-049"
            },
            {
              "name": "1025646",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1025646"
            },
            {
              "name": "oval:org.mitre.oval:def:12664",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12664"
            },
            {
              "name": "44912",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/44912"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2011-1280",
    "datePublished": "2011-06-16T20:21:00",
    "dateReserved": "2011-03-04T00:00:00",
    "dateUpdated": "2024-08-06T22:21:34.188Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CERTA-2011-AVI-357

Description

Solution

CVE-2011-1280 (GCVE-0-2011-1280)

Tags

Sightings

Nomenclature