CVE:CVE-2011-1280
CNNVD:CNNVD-201106-119
Microsoft XML编辑器中存在信息泄露漏洞。该漏洞是由于解析Web Service Discovery文件中的XML外部实体时产生的错误导致的，远程攻击者可利用该漏洞泄露任意文件的内容。
该漏洞位于Microsoft InfoPath 2007 SP2和2010版本；SQL Server 2005 SP3，SP4和2008 SP1，SP2，R2；SQL Server Management Studio Express (SSMSE) 2005；以及Visual Studio 2005 SP1，2008 SP1和2010版本中。
solution:Upgrade microsoft office_infopath to a higher version than 2007:sp2,2010,and avoid the version 2007:sp2,2010; Upgrade microsoft sql_server to a higher version than 2005:sp3,2005:sp4,2008:r2,2008:sp1,2008:sp2,and avoid the version 2005:sp3,2005:sp4,2008:r2,2008:sp1,2008:sp2; Upgrade microsoft sql_server_management_studio_express to a higher version than 2005,and avoid the version 2005; Upgrade microsoft visual_studio to a higher version than 2005:sp1,2008:sp1,2010,and avoid the version 2005:sp1,2008:sp1,2010