MS12-066: Vulnerability in HTML Sanitization Component could allow elevation of privilege: October 9, 2012

Microsoft has released security bulletin MS12-066. To view the complete security bulletin, go to one of the following Microsoft websites:

• Home users:
  http://www.microsoft.com/security/pc-security/bulletins/201210.aspx
  Skip the details: Download the updates for your home computer or laptop from the Microsoft Update website now:
  http://update.microsoft.com/microsoftupdate/
• IT professionals:
  http://technet.microsoft.com/security/bulletin/MS12-066

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

File hash information

Known issues and more information about this security update

The following articles contain more information about this security update as it relates to individual product versions. The articles may contain known issue information. If this is the case, the known issue is listed under each article link.

• 2589280 MS12-066: Description of the security update for SharePoint Server 2010 Service Pack 1 (coreserver): October 9, 2012
  
  Known issues in security update 2589280:
  • After you install this security update on all SharePoint servers, you have to run the PSconfig tool to complete the installation. For more information about how to use the PSconfig tool, go to the following Microsoft TechNet webpage:
    PSconfig command-line reference (SharePoint Server 2010)
• 2687402 MS12-066: Description of the security update for Groove Server 2010 Service Pack 1: October 9, 2012
  
  Known issues in security update 2687402:
  • The Groove security update does not appear in Add or Remove Programs. To determine whether the update is installed, the system administrator can open the SharePoint Configuration Manager console.
• 2687434 MS12-066: Description of the security update for SharePoint Foundation 2010 Service Pack 1: October 9, 2012
  
  Known issues in security update 2687434:
  • You must have SQL Admin access to the Team Foundation Server (TFS) databases in order to install this security update.
    
    Note We do not recommend that you uninstall any security update.
  • You must restart Internet Information Services (IIS) after you install this security update. To do this, restart the World Wide Web Publishing Service. For more information, go to the following Microsoft website:
    IIS Reset Activity
• 2687435 MS12-066: Description of the security update for SharePoint Server 2010 Service Pack 1 (wosrv): October 9, 2012
  
  Known issues in security update 2687435:
  • After you install this security update on all SharePoint servers, you have to run the PSconfig tool to complete the installation. For more information about how to use the PSconfig tool, go to the following Microsoft TechNet website:
    PSconfig command-line reference (SharePoint Server 2010)
• 2687436 MS12-066: Description of the security update for InfoPath 2010 Service Pack 1: October 9, 2012
• 2687439 MS12-066: Description of the security update for InfoPath 2007 Service Pack 2: October 9, 2012
  
  Known issues in security update 2687439:
  • Windows Update will offer this security update to all systems that are running InfoPath 2007. However, the security update is required only for systems that are running Visual Studio Tool for Applications (VSTA). This security update can be installed on any system that is running InfoPath 2007. However, binaries are updated only on systems that are running VSTA.
    
    Note If you install this security update on a system that is running InfoPath 2007 without VSTA and then install VSTA, you do not have to reinstall this security update.
• 2687440 MS12-066: Description of the security update for InfoPath 2007 Service Pack 3: October 9, 2012
  
  Known issues in security update 2687440:
  • Windows Update will offer this security update to all systems that are running InfoPath 2007. However, the security update is required only for systems that are running Visual Studio Tool for Applications (VSTA). This security update can be installed on any system that is running InfoPath 2007. However, binaries are updated only on systems that are running VSTA.
    
    Note If you install this security update on a system that is running InfoPath 2007 without VSTA and then install VSTA, you do not have to reinstall this security update.
• 2687356 MS12-066: Description of the security update for Windows SharePoint Services 3.0 Service Pack 2: October 9, 2012
• 2687442 MS12-066: Description of the security update for Windows SharePoint Services 3.0 Service Pack 2: October 9, 2012
  
  Known issues in security update 2687442:
  • Windows Update will offer this package using the KB number 2687442. However, after installation your system will show this update with the KB number 2687356. This issue occurs because of renumbering error that occurred when we submitted the content for publishing.
• 2726382 MS12-066: Description of the security update for Lync 2010: October 9, 2012
  
  Known issues in security update 2726382:
  • When you install a Microsoft Lync 2010 update, you are not prompted to close Lync 2010. All ongoing conversations and conferences are closed so that the update can be installed successfully. After�the installation is complete, you must manually restart Lync 2010.�
• 2726384 MS12-066: Description of the security update for Microsoft Lync 2010 Attendee (user level install): October 9, 2012
• 2726388 MS12-066: Description of the security update for Microsoft Lync 2010 Attendee (admin level install): October 9, 2012
• 2726391 MS12-066: Description of the security update for Office Communicator 2007 R2: October 9, 2012
• 2687401 MS12-064 and MS12-066: Description of the security update for Office Web Apps 2010 Service Pack 1: October 9, 2012
  
  Known issues in security update 2687401:
  • After you install this security update on all SharePoint servers, you have to run the PSconfig tool to complete the installation. For more information about how to use the PSconfig tool, go the following Microsoft TechNet website:
    PSconfig command-line reference (SharePoint Server 2010)
• 2687436 MS12-066: Description of the security update for InfoPath 2010 Service Pack 1: October 9, 2012
• 2687405 MS12-066: Description of the security update for SharePoint Server 2007 (coreserver): October 9, 2012