Microsoft Security Bulletin Summary for September 2012

1. Introduction

Microsoft(MS)'s regular security updates were released for August 2012.
Users who use MS OS strongly recommended update to be safe from Vulnerability in Visual Studio Team Foundation Server Could Allow Elevation of Privilege and Vulnerability in System Center Configuration Manager Could Allow Elevation of Privilege.

2. Update details

[Important]

[MS12-061] Vulnerability in Visual Studio Team Foundation Server Could Allow Elevation of Privilege (2719584)

Vulnerability: XSS Vulnerability - CVE-2012-1892 

This security update resolves a privately reported vulnerability in Visual Studio Team Foundation Server. The vulnerability could allow elevation of privilege if a user clicks a specially crafted link in an email message or browses to a webpage that is used to exploit the vulnerability. In all cases, however, an attacker would have no way to force users to perform these actions. Instead, an attacker would have to convince users to visit a website, typically by getting them to click a link in an email message or Instant Messenger message that takes them to the attacker's website.

Affected Softwares

- Microsoft Visual Studio Team Foundation Server 2010 Service Pack 1

- Reference site

http://technet.microsoft.com/en-us/security/bulletin/MS12-061

[Important]

[MS12-062] Vulnerability in System Center Configuration Manager Could Allow Elevation of Privilege (2741528)

Vulnerability: Reflected XSS Vulnerability - CVE-2012-2536

This security update resolves a privately reported vulnerability in Microsoft System Center Configuration Manager. The vulnerability could allow elevation of privilege if a user visits an affected website by way of a specially crafted URL. An attacker would have no way to force users to visit such a website. Instead, an attacker would have to persuade users to visit the website, typically by getting them to click a link in an email message or Instant Messenger message that takes users to the attacker's website.

Affected Softwares

- Microsoft Systems Management Server 2003 Service Pack 3

- Microsoft System Center Configuration Manager 2007 Service Pack 2

- Reference site

http://technet.microsoft.com/en-us/security/bulletin/MS12-062