Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. MS12-070: Vulnerability in SQL Server could allow elevation of privilege: October 9, 2012

MS12-070: Vulnerability in SQL Server could allow elevation of privilege: October 9, 2012

Introduction

Microsoft has released security bulletin MS12-070. To view the complete security bulletin, go to one of the following Microsoft websites:

↑ Back to the top

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

↑ Back to the top

More Information

More information about this security update

File hash information

File nameSHA1 hashSHA256 hash
SQL2000.RS-KB983814-v8.00.1077.00-CHS.EXE0AA274CDF82655A4508F4C979EFA637DB8BAD3F53BB2A5F0FCDB23301C8EB48A6694A41D89D78BD17F31EA63EA273FB331F7CF2E
SQL2000.RS-KB983814-v8.00.1077.00-CHT.EXE15A6EF7AD5409602AB98E3DD656142490850F43A73FF79D55668E3E1ACEA287AD8728DD0FFC319A67DAC8B00D741AE7B6AEC5382
SQL2000.RS-KB983814-v8.00.1077.00-ENG.EXECDFF24ECF7828DBC01695EE0BCC469C40271E31E4A77879EFB60677A880051414D8FC9A7F3E4EF4052AB8D586EEACD489D18F1B4
SQL2000.RS-KB983814-v8.00.1077.00-ESN.EXE0D3A0EC5D9E0F785D5D6A20CE88F9445DFA6E85656B25B0E1786C365E05A080B010AE88A900F81C7091D7856DFD3647CA3EED878
SQL2000.RS-KB983814-v8.00.1077.00-FRA.EXEFD5F60ACA842B5D3909E935D1E13D86405A86978CF7CE5404B868A91E532647BDDEA804069069965EA8E7ECCC3C78CEC91732D9D
SQL2000.RS-KB983814-v8.00.1077.00-GER.EXE1156E56096A88740AD0C525DAA0539977EB8864D86644124E478025CF7FED58FCAFE7A39F69A228C644A0C05CC84F172E7319E51
SQL2000.RS-KB983814-v8.00.1077.00-ITA.EXEC114F158ADCE6BB1332037E5F8980FAD8BFB66B5C8747CA74440A113239D88FC9759832DFF601FD62FF773832522C78FF05E384D
SQL2000.RS-KB983814-v8.00.1077.00-JPN.EXE2601185FEF44D5DC4330E2792FECBA18EFC57877BC6C166F9079DC58E553475B9F24FACA29197C3531ADE9CB004D7BF89F4C0836
SQL2000.RS-KB983814-v8.00.1077.00-KOR.EXEE26FF764684FA40C5EAA6EE19917ED09C9D150EC9ADFA99724B3A84D1367FB7FE759A59B3C9696196069C037FAD606201F9E19E0
SQLServer2005-KB2716422-IA64-ENU.exe97DB6CDBFEBD4394C92072961055B5CF6DF50256F3C310B53924D752ED7A5E685532F03C7AF75E204521AC43D434E9194688E744
SQLServer2005-KB2716422-x64-ENU.exe7C5D023FFCCD44A15AF3872A5D4FF82230F0369073CD864DE13418A36A9435B5D6BE8F863A4FB5F68B22181667842A3FF7264315
SQLServer2005-KB2716422-x86-ENU.exe6AD7B679B72EC5DBA8E35C75A0BC884CC969EBD1D162B78299C7BCCC99AA6286373A9B9A2FB97D74310E916E0E2DA89A554BF877
SQLServer2005-KB2716423-IA64-ENU.exe28C1D89D0A41BFB47FB269DF75B6551FFAF503D8038B9DB1D42CD331F4B98558E7E1AE9F822A740617365A307FFF8AB9FD0E415C
SQLServer2005-KB2716423-x64-ENU.exe098152BDEB7E588C6DB6EDD885285A76AAF0ECFA4F919349F1E73F31CEC934E893017322371ECE8CAEBAD244511695926426970B
SQLServer2005-KB2716423-x86-ENU.exe857405248AF1D27CB3596BFA4CAF751EAB40199075D473A7040CEC1C91E2DDE8038C65D6ED581EEC7D17F261E788D575BE4BAC15
SQLServer2005-KB2716424-IA64-ENU.exe4CDC375C8BB3AC06EED61054D7A01CC8E05E88F5A2028CC5820C7D3401A21A958C61445A19AF1D942A91E6FE7D70EB55B0855334
SQLServer2005-KB2716424-x64-ENU.exe394309AD6E472C62C3EF8D04F60CAA949333967908795736C30895DDF129CE1831E29789D3BAF9302D79E6CAAB7AC0C8AFCEB192
SQLServer2005-KB2716424-x86-ENU.exe5789F9FCF6B6EC1D7B521F8C09F8E04579C1ECE199B9EDC0DB10E8A858523BC0892BADD8285B90D54053EFE261244E9824ACDECE
SQLServer2005-KB2716426-IA64-ENU.exe46448D0C1C05021254071DD352D75C960E1170C8A59D205F666F78DA84F8464D53AAED2A4D57B8864796DE127A1535E67A8FD287
SQLServer2005-KB2716426-x64-ENU.exe57306D97AD5FBC57DD0A41CB77E45112294A0619DB071C0CA0E271B40058153CDFD7C817454B5660C41C8A1374A0513176E6177C
SQLServer2005-KB2716426-x86-ENU.exeCA64DD1A33D082070C1BED2E9A911B8AFC18C22F7867FCF4361F99B38FB02CE7B399D80E6C7C690D92E38B234CCBB77B9B87283E
SQLServer2005-KB2716427-IA64-ENU.exe58F335E51A5C40C70CDF63096D29C54E7B4674F090907D3471898F0909CA1BF9A22ECD8246A7ED2D96BEEBFFFE1AF09ECF55A12E
SQLServer2005-KB2716427-x64-ENU.exe3E0B6786301A86F41C956058804957BF52CE61547B407D15D47A59EC1EC0D433EC2973D8A16FC29DFE743DE674D491710C5821FD
SQLServer2005-KB2716427-x86-ENU.exeB122116EB37159AA7286CCCABB3B5F1387FC36338BD26BD7D563DCA9F9015112215BE9987AF3DD69CD785459349D7A6D77633E62
SQLServer2005-KB2716429-IA64-ENU.exe6EE2DD82D8D53F16369761F38FF905371A9DD4324582378C69B9B682C678FF935A51F6163333D0053DFCB9E48A49FB45783C0F15
SQLServer2005-KB2716429-x64-ENU.exeABD7C2ABB207539ED55676026D3943D690FDE6D50ED6FA77D98D9D352544AB3AB78F907CB183148C398947D8C14217F3D6C05F0D
SQLServer2005-KB2716429-x86-ENU.exe4C34B433AEF6E4D9DBAACA5EEA9B06AB3628501D3AADE901200A92C3E12A5EE9B13926AE42F35040808B701E3AEAEBC2BE5D5F2C
SQLServer2008-KB2716430-IA64.exe336823C0FA41892F691051C7F35EEDAE207D993D807C2730C46EA24BA069B91D02423C13E4921878221B23CD032E5C07DA8E36F7
SQLServer2008-KB2716430-x64.exeEC8FF4D3D5DF11B86BA2AB04EC949213D072BCE56DDC838D9A0AC3C9402F9E9C91E7873C42FE3F7CCBADFEAB27B60763799B63D9
SQLServer2008-KB2716430-x86.exe90F679E62B1EC365295A84F485B7C53A2E9ECD6C16C7C04DD40F4755043115B327E75CB9F5A505E8D66C94D263A791AAD4EB5977
SQLServer2008-KB2716431-IA64.exe094075A74B53813F7F4A9519F41BDA043DBC91B0B15E83B0CEFA8FE8FFB01255D0F576A8AF36AC694CD9FA163D40CD736A2AA6CD
SQLServer2008-KB2716431-x64.exe3E4A5BB8EA26148CD022C28A50F142461C810911B5C35C2A987317BBF219FF0098BAC930C643998F3D23139D577CD421257F2A05
SQLServer2008-KB2716431-x86.exe6A54D6E961D7F8684C0CA14A7AFF1E1FCEA888AA8ADF07AC6BC78BE6F66652177E8290F36C6CD9DD976ED960B4C11F8634E77B8E
SQLServer2008-KB2716433-IA64.exeD7E30DDFB3F18D6743DEC7301E56F6E81ED68FBA40E55A6FA0D018A8B8DD316BF2FEA2623C3F58A0D687188CCB7935FA8D03ABCE
SQLServer2008-KB2716433-x64.exe72C83B02C167EB1803B44F6239A2F38E1B52EA468331D235CDA02C06AD66630F7B75A59598EE8FEBD7A35428102B0AD3397F76F5
SQLServer2008-KB2716433-x86.exe1CFFD1A99A4925E64A6426A942158C755C8221CA512795F6A3260ECB62469EE581F8D572259F0AE3AFADEBE50341B6632384A104
SQLServer2008-KB2716434-IA64.exe8164E0534248250036C93F5B3DA76B2B9BD2AC1542E1DC9A8607570A8C442127C51234434F1CF0F48CC7B1200151608F5CD8CE94
SQLServer2008-KB2716434-x64.exeC0653D3EE1BD6D419F225F2BA0C47BD215C9C732DDB5B74C66544420BBCA9D27C3027A1EF09F64FAFC8005158E37C3BB8CA2C95B
SQLServer2008-KB2716434-x86.exeDDAA5864D3BCFEEDA82A1CC17A41610591A512C01FB5AF229B6743C36857A26368C8B61BE02E80E298606F687B460400ABF92F58
SQLServer2008-KB2716436-IA64.exeA34170B1151DB782DC520BDBC415F0A336A292E0A4BB179F1BD3B8CDB4F72129CD1F97131BFA9EE2D0FB543D38825791AAE06AF1
SQLServer2008-KB2716436-x64.exe7E509A8F349861700ED998A1E1CC6E8852DAF5F015C6E8BD863F5565641CAC0D0D11BA280BCB3BB7202A477E91A7EFBB1D05095C
SQLServer2008-KB2716436-x86.exe7A7091248F8B79BC17EF4C72530147FC387EC2A6F897EC7C1B5F4FF93C7FD872E5B51B471CFFB5F835D065F0469D1F4B861CAAD8
SQLServer2008R2-KB2716437-IA64.exe66AD860A1843AEB583316B9D702401DE429321F6FF145C766516B8B705999667088DC1F2CB5EB547F35739DA657DB702A1A49B36
SQLServer2008R2-KB2716437-x64.exeDCEBF296F1287CE1A172DECE5F84CBD8E58AB1FE772A71A8D2987877B98AF59B03C7AD6E286A98F9F38BD699B4298AFCE690BE63
SQLServer2008R2-KB2716437-x86.exe171A564CA184234A3F07B64AAC2099094C30D6CDAE1F953237ED7F4D7C118D112772FDD8FB659109C67C5DBEB8376DED4FE2AA2E
SQLServer2008R2-KB2716438-IA64.exe9227E3B2868844B02D6F9C06F31F162537CC290A781C343FED5A8DBC447388E885D09EEED4CCC6512BD591F4C3F79A8752A4C089
SQLServer2008R2-KB2716438-x64.exe043CF5E86F3A33064DB4FCB432DCF2A9E6B0239A874B9EF7B9E079F9FF8DFF802E74BBDC52B1927EE9FD8C61CD3C0DCFE3BAB697
SQLServer2008R2-KB2716438-x86.exeEC7A708EEDC15094AA0ED16CF5413AEF1FF2D4C28AB2FB82E4A4259E9CEF3032EDFA904BC6550647B9EDFDA04B437D6DA490BE46
SQLServer2008R2-KB2716439-IA64.exe29FA3737813E56158CA046A6AD2DC34C202FA494192B24D3571AB119473AD5B3BAD481833CEFE8AB69DB22F76EDA4E8E58832A8E
SQLServer2008R2-KB2716439-x64.exe86B1B11E789EAA84CAEB2C82F6BF01FABCBCE854A2FB363BC12D25B4E77966B34095CACF56A2D918B71C9A5B959AC36B4EF3BCC9
SQLServer2008R2-KB2716439-x86.exe8566E4C6A8F45D1E09FD1BC486141C73A4A5D428BDA4D1AAE0C7C5EC11E9E027F3F3C9171175DD0663B6D2A2EDB8442472CDCA20
SQLServer2008R2-KB2716440-IA64.exeE0035ACCF26654F258A1360071AC83EEB1ABA04B4B179047E2D3A358DBE4B8608526C4599B29BEA6207BDE474E8ACC8665FF9638
SQLServer2008R2-KB2716440-x64.exe8F9769D9BE4CE48354CEF73A89910433CE206812549EEB72325EDFBE55E51D84D983F48AE721E3B6BC42B7E8FAED90B903CC7F3D
SQLServer2008R2-KB2716440-x86.exe159DAD16B9929DEE60AD1188A079EF5574E713B7B2E42FC63FABB60F7B3D066291D77192E8ECE66F011A304EEAB3AC94916231D8
SQLServer2012-KB2716441-x64.exe98BD0C436A2659AB02174C8087E31FD493EAE5F8B2FF545B125A6145196C6BC906B255AE62E2314F6B9E229E652C0416799A1BD9
SQLServer2012-KB2716441-x86.exeA84CAF2A1DD036FDBB3D80090D0C9E94528F88503D8DDA109A28B6164F388DF7811B55C1885E7B04D417891DEA5D905BD49B1C18
SQLServer2012-KB2716442-x64.exe8B737896DEE0508FDA8EFDB7F51C5629B7EB9B91204CE59DCD829A2E31FF51D3B332150B42D2533C3EFF9695E91A724A2018B60B
SQLServer2012-KB2716442-x86.exe1115EA85E3D879886D43712FDDF389612F56D7A5A3DBF5D9E32E5CCEB2536EAEA7B6825921E707936FB5272E74CDB0297C84B969

Known issues and additional information about this security update

The following articles contain additional information about this security update as it relates to individual product versions. The articles may contain known issue information. If this is the case, the known issue is listed below each article link.
  • 2716441 MS12-070: Description of the security update for SQL Server 2012 QFE: October 9, 2012
  • 2716442 MS12-070: Description of the security update for SQL Server 2012 GDR: October 9, 2012
  • 2716439 MS12-070: Description of the security update for SQL Server 2008 R2 Service Pack 1 QFE: October 9, 2012

    The following are the known issues in security update 2716439. For more information about these known issues, see security update 2716439.
    • When you use the /? switch or the /Help switch with this security update package, you receive an error message.
    • After you install this security update, the Add or Remove Program entries for this security update do not have "Security Update" in the title of the security update.
    • After you install this security update, the installation wizard shows the security update as an "Update Program" instead of a "Security Update."
  • 2716440 MS12-070: Description of the security update for SQL Server 2008 R2 Service Pack 1 GDR: October 9, 2012

    The following are the known issues in security update 2716440. For more information about these known issues, see security update 2716440.
    • When you use the /? switch or the /Help switch with this security update package, you receive an error message.
    • After you install this security update, the Add or Remove Program entries for this security update do not have "Security Update" in the title of the security update.
    • After you install this security update, the installation wizard shows the security update as an "Update Program" instead of a "Security Update."
  • 2716435 MS12-070: Description of the security update for SQL Server 2008 Service Pack 3 QFE: October 9, 2012

    The following are the known issues in security update 2716435. For more information about these known issues, see security update 2716435.
    • You may be able to install this SQL Server 2008-based security update on a SQL Server 2005-based system where SQL Server 2008 is not installed.
  • 2716436 MS12-070: Description of the security update for SQL Server 2008 Service Pack 3 GDR: October 9, 2012

    The following are the known issues in security update 2716436. For more information about these known issues, see security update 2716436.
    • You may be able to install this SQL Server 2008-based security update on a SQL Server 2005-based system where SQL Server 2008 is not installed.
  • 2716433 MS12-070: Description of the security update for SQL Server 2008 Service Pack 2 QFE: October 9, 2012

    The following are the known issues in security update 2716433. For more information about these known issues, see security update 2716433.
    • You may be able to install this SQL Server 2008-based security update on a SQL Server 2005-based system where SQL Server 2008 is not installed.
  • 2716434 MS12-070: Description of the security update for SQL Server 2008 Service Pack 2 GDR: October 9, 2012










  • 2716427 MS12-070: Description of the security update for SQL Server 2005 Service Pack 4 QFE: October 9, 2012
  • 2716429 MS12-070: Description of the security update for SQL Server 2005 Service Pack 4 GDR: October 9, 2012
  • 983814 MS12-070: Description of the security update for SQL Server 2000 Reporting Services Service Pack 2: October 9, 2012

↑ Back to the top


Applies to

This article applies to the following:
  • Microsoft SQL Server 2012
  • Microsoft SQL Server 2008 R2 Service Pack 1
  • Microsoft SQL Server 2008 R2
  • Microsoft SQL Server 2008 Service Pack 3
  • Microsoft SQL Server 2005 Service Pack 4
  • Microsoft SQL Server 2000 Reporting Services Service Pack 2

↑ Back to the top

Keywords: atdownload, kbbug, kbexpertiseinter, kbfix, kblangall, kbsecbulletin, kb, kbsecreview, kbsecurity, kbsecvulnerability, kbmustloc

↑ Back to the top

Article Info
Article ID : 2754849
Revision : 1
Created on : 1/7/2017
Published on : 10/9/2012
Exists online : False
Views : 145