MS14-073: Vulnerability in Microsoft SharePoint Foundation could allow for elevation of privilege: November 11, 2014

Applies To
Microsoft SharePoint Foundation 2010

INTRODUCTION

Microsoft has released security bulletin MS14-073. To learn more about this security bulletin:

How to obtain help and support for this security update

Help installing updates:
Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Troubleshooting and Support

Help protect your Windows-based computer from viruses and malware:
Virus Solution and Security Center

Local support according to your country:
International Support

More Information

Important After you install this security update on all FAST servers, you must run the PSconfig tool to complete the installation. For more information about how to use the PSconfig tool, go to the following TechNet webpage:
http:⁠//technet.microsoft.com/en-us/library/hh285624.aspx#BKMK_InstallASoftwareUpdate

Known issues and more information about this security update

The following articles contain more information about this security update as it relates to individual product versions. The articles may contain known issue information. If this is the case, the known issue is listed under each article link.

  • 2889838 MS14-073: Description of the security update for SharePoint Foundation 2010: October 14, 2014

Security Update Deployment

Microsoft SharePoint Foundation 2010 (all versions)Reference Table

The following table contains the security update information for this software.

Security update file name For Microsoft SharePoint Foundation 2010 Service Pack 2:
wssloc2010-kb2889838-fullfile-x64-glb.exe
Installation switches See Microsoft Knowledge Base Article 912203
Restart requirement In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, you receive a message that advises you to restart.

To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.
Removal information This security update cannot be removed.
File information See Microsoft Knowledge Base Article 2889838
Registry key verification Not applicable

      

FILE INFORMATION

File hash information

Package Name Package Hash SHA1 Package Hash SHA2
wssloc2010-kb2889838-fullfile-x64-glb.exe FFBDF48C1FF511D01A311B3D174CB288FA024F20 4046BC6CECD2684AEF2C28A87F53BD6C4BFAD122A71DEE4DBC2B18443120566D