Remote File Disclosure in Microsoft Office and SharePoint Products

CVE-2011-1892

Summary

Multiple Microsoft Office and SharePoint products have a vulnerability that arises from improper handling of Web Parts containing XML classes that reference external entities. This flaw enables remote authenticated users to exploit crafted XML and XSL files, potentially allowing unauthorized access to arbitrary files on the system. Admins and users of affected versions should consider applying updates and reviewing their security configurations to mitigate the risk associated with this vulnerability.

References