Vulnerability in Windows Common Controls Could Allow Remote Code Execution

• wdolby

  Old Hand

  Points: 376

  More actions

  December 4, 2012 at 6:34 am

  #271197

  MS12-060, KB2687441.

  http://technet.microsoft.com/en-us/security/bulletin/ms12-060

  http://support.microsoft.com/kb/2687441#AppliesToProducts

  I am researching applying this patch and wanted to see if others have installed this. When reading the Microsoft Article, it indicates that the affected Office 2007 components are installed with SQL 2005/08 by default. Some other sites stated that this patch only needs to be applied if Office is installed on the SQL Server. Please let me know if you have installed this and your experience with it.

  Thanks!

• Hemant.R

  Ten Centuries

  Points: 1286

  More actions

  December 11, 2012 at 9:20 am

  #1567503

  you can start sql service using low priviledge user ,

  also you can remove rights of user which having access on sql server installation folder

  check cmdshell is not enable.