MS12-070: Vulnerability in SQL Server could allow elevation of privilege: October 9, 2012

      View products that this article applies to.

Microsoft has released security bulletin MS12-070. To view the complete security bulletin, go to one of the following Microsoft websites:

Introduction

How to obtain help and support for this security update

Help installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

More information about this security update

File hash information

File name SHA1 hash SHA256 hash
SQL2000.RS-KB983814-v8.00.1077.00-CHS.EXE 0AA274CDF82655A4508F4C979EFA637DB8BAD3F5 3BB2A5F0FCDB23301C8EB48A6694A41D89D78BD17F31EA63EA273FB331F7CF2E
SQL2000.RS-KB983814-v8.00.1077.00-CHT.EXE 15A6EF7AD5409602AB98E3DD656142490850F43A 73FF79D55668E3E1ACEA287AD8728DD0FFC319A67DAC8B00D741AE7B6AEC5382
SQL2000.RS-KB983814-v8.00.1077.00-ENG.EXE CDFF24ECF7828DBC01695EE0BCC469C40271E31E 4A77879EFB60677A880051414D8FC9A7F3E4EF4052AB8D586EEACD489D18F1B4
SQL2000.RS-KB983814-v8.00.1077.00-ESN.EXE 0D3A0EC5D9E0F785D5D6A20CE88F9445DFA6E856 56B25B0E1786C365E05A080B010AE88A900F81C7091D7856DFD3647CA3EED878
SQL2000.RS-KB983814-v8.00.1077.00-FRA.EXE FD5F60ACA842B5D3909E935D1E13D86405A86978 CF7CE5404B868A91E532647BDDEA804069069965EA8E7ECCC3C78CEC91732D9D
SQL2000.RS-KB983814-v8.00.1077.00-GER.EXE 1156E56096A88740AD0C525DAA0539977EB8864D 86644124E478025CF7FED58FCAFE7A39F69A228C644A0C05CC84F172E7319E51
SQL2000.RS-KB983814-v8.00.1077.00-ITA.EXE C114F158ADCE6BB1332037E5F8980FAD8BFB66B5 C8747CA74440A113239D88FC9759832DFF601FD62FF773832522C78FF05E384D
SQL2000.RS-KB983814-v8.00.1077.00-JPN.EXE 2601185FEF44D5DC4330E2792FECBA18EFC57877 BC6C166F9079DC58E553475B9F24FACA29197C3531ADE9CB004D7BF89F4C0836
SQL2000.RS-KB983814-v8.00.1077.00-KOR.EXE E26FF764684FA40C5EAA6EE19917ED09C9D150EC 9ADFA99724B3A84D1367FB7FE759A59B3C9696196069C037FAD606201F9E19E0
SQLServer2005-KB2716422-IA64-ENU.exe 97DB6CDBFEBD4394C92072961055B5CF6DF50256 F3C310B53924D752ED7A5E685532F03C7AF75E204521AC43D434E9194688E744
SQLServer2005-KB2716422-x64-ENU.exe 7C5D023FFCCD44A15AF3872A5D4FF82230F03690 73CD864DE13418A36A9435B5D6BE8F863A4FB5F68B22181667842A3FF7264315
SQLServer2005-KB2716422-x86-ENU.exe 6AD7B679B72EC5DBA8E35C75A0BC884CC969EBD1 D162B78299C7BCCC99AA6286373A9B9A2FB97D74310E916E0E2DA89A554BF877
SQLServer2005-KB2716423-IA64-ENU.exe 28C1D89D0A41BFB47FB269DF75B6551FFAF503D8 038B9DB1D42CD331F4B98558E7E1AE9F822A740617365A307FFF8AB9FD0E415C
SQLServer2005-KB2716423-x64-ENU.exe 098152BDEB7E588C6DB6EDD885285A76AAF0ECFA 4F919349F1E73F31CEC934E893017322371ECE8CAEBAD244511695926426970B
SQLServer2005-KB2716423-x86-ENU.exe 857405248AF1D27CB3596BFA4CAF751EAB401990 75D473A7040CEC1C91E2DDE8038C65D6ED581EEC7D17F261E788D575BE4BAC15
SQLServer2005-KB2716424-IA64-ENU.exe 4CDC375C8BB3AC06EED61054D7A01CC8E05E88F5 A2028CC5820C7D3401A21A958C61445A19AF1D942A91E6FE7D70EB55B0855334
SQLServer2005-KB2716424-x64-ENU.exe 394309AD6E472C62C3EF8D04F60CAA9493339679 08795736C30895DDF129CE1831E29789D3BAF9302D79E6CAAB7AC0C8AFCEB192
SQLServer2005-KB2716424-x86-ENU.exe 5789F9FCF6B6EC1D7B521F8C09F8E04579C1ECE1 99B9EDC0DB10E8A858523BC0892BADD8285B90D54053EFE261244E9824ACDECE
SQLServer2005-KB2716426-IA64-ENU.exe 46448D0C1C05021254071DD352D75C960E1170C8 A59D205F666F78DA84F8464D53AAED2A4D57B8864796DE127A1535E67A8FD287
SQLServer2005-KB2716426-x64-ENU.exe 57306D97AD5FBC57DD0A41CB77E45112294A0619 DB071C0CA0E271B40058153CDFD7C817454B5660C41C8A1374A0513176E6177C
SQLServer2005-KB2716426-x86-ENU.exe CA64DD1A33D082070C1BED2E9A911B8AFC18C22F 7867FCF4361F99B38FB02CE7B399D80E6C7C690D92E38B234CCBB77B9B87283E
SQLServer2005-KB2716427-IA64-ENU.exe 58F335E51A5C40C70CDF63096D29C54E7B4674F0 90907D3471898F0909CA1BF9A22ECD8246A7ED2D96BEEBFFFE1AF09ECF55A12E
SQLServer2005-KB2716427-x64-ENU.exe 3E0B6786301A86F41C956058804957BF52CE6154 7B407D15D47A59EC1EC0D433EC2973D8A16FC29DFE743DE674D491710C5821FD
SQLServer2005-KB2716427-x86-ENU.exe B122116EB37159AA7286CCCABB3B5F1387FC3633 8BD26BD7D563DCA9F9015112215BE9987AF3DD69CD785459349D7A6D77633E62
SQLServer2005-KB2716429-IA64-ENU.exe 6EE2DD82D8D53F16369761F38FF905371A9DD432 4582378C69B9B682C678FF935A51F6163333D0053DFCB9E48A49FB45783C0F15
SQLServer2005-KB2716429-x64-ENU.exe ABD7C2ABB207539ED55676026D3943D690FDE6D5 0ED6FA77D98D9D352544AB3AB78F907CB183148C398947D8C14217F3D6C05F0D
SQLServer2005-KB2716429-x86-ENU.exe 4C34B433AEF6E4D9DBAACA5EEA9B06AB3628501D 3AADE901200A92C3E12A5EE9B13926AE42F35040808B701E3AEAEBC2BE5D5F2C
SQLServer2008-KB2716430-IA64.exe 336823C0FA41892F691051C7F35EEDAE207D993D 807C2730C46EA24BA069B91D02423C13E4921878221B23CD032E5C07DA8E36F7
SQLServer2008-KB2716430-x64.exe EC8FF4D3D5DF11B86BA2AB04EC949213D072BCE5 6DDC838D9A0AC3C9402F9E9C91E7873C42FE3F7CCBADFEAB27B60763799B63D9
SQLServer2008-KB2716430-x86.exe 90F679E62B1EC365295A84F485B7C53A2E9ECD6C 16C7C04DD40F4755043115B327E75CB9F5A505E8D66C94D263A791AAD4EB5977
SQLServer2008-KB2716431-IA64.exe 094075A74B53813F7F4A9519F41BDA043DBC91B0 B15E83B0CEFA8FE8FFB01255D0F576A8AF36AC694CD9FA163D40CD736A2AA6CD
SQLServer2008-KB2716431-x64.exe 3E4A5BB8EA26148CD022C28A50F142461C810911 B5C35C2A987317BBF219FF0098BAC930C643998F3D23139D577CD421257F2A05
SQLServer2008-KB2716431-x86.exe 6A54D6E961D7F8684C0CA14A7AFF1E1FCEA888AA 8ADF07AC6BC78BE6F66652177E8290F36C6CD9DD976ED960B4C11F8634E77B8E
SQLServer2008-KB2716433-IA64.exe D7E30DDFB3F18D6743DEC7301E56F6E81ED68FBA 40E55A6FA0D018A8B8DD316BF2FEA2623C3F58A0D687188CCB7935FA8D03ABCE
SQLServer2008-KB2716433-x64.exe 72C83B02C167EB1803B44F6239A2F38E1B52EA46 8331D235CDA02C06AD66630F7B75A59598EE8FEBD7A35428102B0AD3397F76F5
SQLServer2008-KB2716433-x86.exe 1CFFD1A99A4925E64A6426A942158C755C8221CA 512795F6A3260ECB62469EE581F8D572259F0AE3AFADEBE50341B6632384A104
SQLServer2008-KB2716434-IA64.exe 8164E0534248250036C93F5B3DA76B2B9BD2AC15 42E1DC9A8607570A8C442127C51234434F1CF0F48CC7B1200151608F5CD8CE94
SQLServer2008-KB2716434-x64.exe C0653D3EE1BD6D419F225F2BA0C47BD215C9C732 DDB5B74C66544420BBCA9D27C3027A1EF09F64FAFC8005158E37C3BB8CA2C95B
SQLServer2008-KB2716434-x86.exe DDAA5864D3BCFEEDA82A1CC17A41610591A512C0 1FB5AF229B6743C36857A26368C8B61BE02E80E298606F687B460400ABF92F58
SQLServer2008-KB2716436-IA64.exe A34170B1151DB782DC520BDBC415F0A336A292E0 A4BB179F1BD3B8CDB4F72129CD1F97131BFA9EE2D0FB543D38825791AAE06AF1
SQLServer2008-KB2716436-x64.exe 7E509A8F349861700ED998A1E1CC6E8852DAF5F0 15C6E8BD863F5565641CAC0D0D11BA280BCB3BB7202A477E91A7EFBB1D05095C
SQLServer2008-KB2716436-x86.exe 7A7091248F8B79BC17EF4C72530147FC387EC2A6 F897EC7C1B5F4FF93C7FD872E5B51B471CFFB5F835D065F0469D1F4B861CAAD8
SQLServer2008R2-KB2716437-IA64.exe 66AD860A1843AEB583316B9D702401DE429321F6 FF145C766516B8B705999667088DC1F2CB5EB547F35739DA657DB702A1A49B36
SQLServer2008R2-KB2716437-x64.exe DCEBF296F1287CE1A172DECE5F84CBD8E58AB1FE 772A71A8D2987877B98AF59B03C7AD6E286A98F9F38BD699B4298AFCE690BE63
SQLServer2008R2-KB2716437-x86.exe 171A564CA184234A3F07B64AAC2099094C30D6CD AE1F953237ED7F4D7C118D112772FDD8FB659109C67C5DBEB8376DED4FE2AA2E
SQLServer2008R2-KB2716438-IA64.exe 9227E3B2868844B02D6F9C06F31F162537CC290A 781C343FED5A8DBC447388E885D09EEED4CCC6512BD591F4C3F79A8752A4C089
SQLServer2008R2-KB2716438-x64.exe 043CF5E86F3A33064DB4FCB432DCF2A9E6B0239A 874B9EF7B9E079F9FF8DFF802E74BBDC52B1927EE9FD8C61CD3C0DCFE3BAB697
SQLServer2008R2-KB2716438-x86.exe EC7A708EEDC15094AA0ED16CF5413AEF1FF2D4C2 8AB2FB82E4A4259E9CEF3032EDFA904BC6550647B9EDFDA04B437D6DA490BE46
SQLServer2008R2-KB2716439-IA64.exe 29FA3737813E56158CA046A6AD2DC34C202FA494 192B24D3571AB119473AD5B3BAD481833CEFE8AB69DB22F76EDA4E8E58832A8E
SQLServer2008R2-KB2716439-x64.exe 86B1B11E789EAA84CAEB2C82F6BF01FABCBCE854 A2FB363BC12D25B4E77966B34095CACF56A2D918B71C9A5B959AC36B4EF3BCC9
SQLServer2008R2-KB2716439-x86.exe 8566E4C6A8F45D1E09FD1BC486141C73A4A5D428 BDA4D1AAE0C7C5EC11E9E027F3F3C9171175DD0663B6D2A2EDB8442472CDCA20
SQLServer2008R2-KB2716440-IA64.exe E0035ACCF26654F258A1360071AC83EEB1ABA04B 4B179047E2D3A358DBE4B8608526C4599B29BEA6207BDE474E8ACC8665FF9638
SQLServer2008R2-KB2716440-x64.exe 8F9769D9BE4CE48354CEF73A89910433CE206812 549EEB72325EDFBE55E51D84D983F48AE721E3B6BC42B7E8FAED90B903CC7F3D
SQLServer2008R2-KB2716440-x86.exe 159DAD16B9929DEE60AD1188A079EF5574E713B7 B2E42FC63FABB60F7B3D066291D77192E8ECE66F011A304EEAB3AC94916231D8
SQLServer2012-KB2716441-x64.exe 98BD0C436A2659AB02174C8087E31FD493EAE5F8 B2FF545B125A6145196C6BC906B255AE62E2314F6B9E229E652C0416799A1BD9
SQLServer2012-KB2716441-x86.exe A84CAF2A1DD036FDBB3D80090D0C9E94528F8850 3D8DDA109A28B6164F388DF7811B55C1885E7B04D417891DEA5D905BD49B1C18
SQLServer2012-KB2716442-x64.exe 8B737896DEE0508FDA8EFDB7F51C5629B7EB9B91 204CE59DCD829A2E31FF51D3B332150B42D2533C3EFF9695E91A724A2018B60B
SQLServer2012-KB2716442-x86.exe 1115EA85E3D879886D43712FDDF389612F56D7A5 A3DBF5D9E32E5CCEB2536EAEA7B6825921E707936FB5272E74CDB0297C84B969

Known issues and additional information about this security update

The following articles contain additional information about this security update as it relates to individual product versions. The articles may contain known issue information. If this is the case, the known issue is listed below each article link.

  • 2716441 MS12-070: Description of the security update for SQL Server 2012 QFE: October 9, 2012

  • 2716442 MS12-070: Description of the security update for SQL Server 2012 GDR: October 9, 2012

  • 2716439 MS12-070: Description of the security update for SQL Server 2008 R2 Service Pack 1 QFE: October 9, 2012

    The following are the known issues in security update 2716439. For more information about these known issues, see security update 2716439.

    • When you use the ⁠/?⁠ switch or the /Help switch with this security update package, you receive an error message.
    • After you install this security update, the Add or Remove Program entries for this security update do not have "Security Update" in the title of the security update.
    • After you install this security update, the installation wizard shows the security update as an "Update Program" instead of a "Security Update."
  • 2716440 MS12-070: Description of the security update for SQL Server 2008 R2 Service Pack 1 GDR: October 9, 2012

    The following are the known issues in security update 2716440. For more information about these known issues, see security update 2716440.

    • When you use the ⁠/?⁠ switch or the /Help switch with this security update package, you receive an error message.
    • After you install this security update, the Add or Remove Program entries for this security update do not have "Security Update" in the title of the security update.
    • After you install this security update, the installation wizard shows the security update as an "Update Program" instead of a "Security Update."
  • 2716435 MS12-070: Description of the security update for SQL Server 2008 Service Pack 3 QFE: October 9, 2012

    The following are the known issues in security update 2716435. For more information about these known issues, see security update 2716435.

    • You may be able to install this SQL Server 2008-based security update on a SQL Server 2005-based system where SQL Server 2008 is not installed.
  • 2716436 MS12-070: Description of the security update for SQL Server 2008 Service Pack 3 GDR: October 9, 2012

    The following are the known issues in security update 2716436. For more information about these known issues, see security update 2716436.

    • You may be able to install this SQL Server 2008-based security update on a SQL Server 2005-based system where SQL Server 2008 is not installed.
  • 2716433 MS12-070: Description of the security update for SQL Server 2008 Service Pack 2 QFE: October 9, 2012

    The following are the known issues in security update 2716433. For more information about these known issues, see security update 2716433.

    • You may be able to install this SQL Server 2008-based security update on a SQL Server 2005-based system where SQL Server 2008 is not installed.
  • 2716434 MS12-070: Description of the security update for SQL Server 2008 Service Pack 2 GDR: October 9, 2012

  • 2716427 MS12-070: Description of the security update for SQL Server 2005 Service Pack 4 QFE: October 9, 2012

  • 2716429 MS12-070: Description of the security update for SQL Server 2005 Service Pack 4 GDR: October 9, 2012

  • 983814 MS12-070: Description of the security update for SQL Server 2000 Reporting Services Service Pack 2: October 9, 2012

More Information

      

Applies to

This article applies to the following:

  • Microsoft SQL Server 2012
  • Microsoft SQL Server 2008 R2 Service Pack 1
  • Microsoft SQL Server 2008 R2
  • Microsoft SQL Server 2008 Service Pack 3
  • Microsoft SQL Server 2005 Service Pack 4
  • Microsoft SQL Server 2000 Reporting Services Service Pack 2