<< Back
CVE Number Vulnerability Product Severity Date
MS12-067 Vulnerabilities in FAST Search Server 2010 for SharePoint Parsing Could Allow Remote Code Execution (2742321) Microsoft FAST Important 10-10-2012

Technical Information

Brief overview of the risk:
This security update resolves publicly disclosed vulnerabilities in Microsoft FAST Search Server 2010 for SharePoint. The vulnerabilities could allow remote code execution in the security context of a user account with a restricted token. FAST Search Server for SharePoint is only affected by this issue when Advanced Filter Pack is enabled. By default, Advanced Filter Pack is disabled.
Detailed Information on the risk:

Remote code execution vulnerabilities exist in FAST Search Server 2010 for SharePoint using the Advanced Filter Pack, an attacker could run arbitrary code in the context of a user account with a restricted token. By default, Advanced Filter Pack in FAST is disabled.


Further information on this exploit is available at : MS12-067

Affected Software

Microsoft FAST Search Server 2010 for SharePoint Service Pack 1