Vulnerability in Windows Common Controls Could Allow Remote Code Execution

SQLServerCentral is supported by Red Gate Software Ltd.

Popular Topics

Home

Members

Calendar

Who's On

Home » SQL Server 2008 » Security (SS2K8) » Vulnerability in Windows Common Controls...

Vulnerability in Windows Common Controls Could Allow Remote Code Execution

Rate Topic

Display Mode

Topic Options

Author

Message

wdolby

Posted Tuesday, December 04, 2012 6:34 AM

SSC-Enthusiastic

Group: General Forum Members
Last Login: Yesterday @ 11:20 AM
Points: 151, Visits: 272

MS12-060, KB2687441.

http://technet.microsoft.com/en-us/security/bulletin/ms12-060
http://support.microsoft.com/kb/2687441#AppliesToProducts

I am researching applying this patch and wanted to see if others have installed this. When reading the Microsoft Article, it indicates that the affected Office 2007 components are installed with SQL 2005/08 by default. Some other sites stated that this patch only needs to be applied if Office is installed on the SQL Server. Please let me know if you have installed this and your experience with it.

Thanks!

Post #1392431

Hemant.R

Posted Tuesday, December 11, 2012 9:20 AM

SSC Rookie

Group: General Forum Members
Last Login: Yesterday @ 6:47 AM
Points: 46, Visits: 176

you can start sql service using low priviledge user ,

also you can remove rights of user which having access on sql server installation folder

check cmdshell is not enable.

Post #1395192

« Prev Topic | Next Topic »

Permissions