PT-2007-4332 · Microsoft · Agent+1

Yamata Li · Publicado 2007-09-11 · Atualizado 2018-10-16 · CVE-2007-3040

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Microsoft Agent version 2.0.0.3425

Description: A stack-based buffer overflow issue exists in the way Microsoft Agent handles certain specially crafted URLs, allowing remote attackers to execute arbitrary code. This issue is triggered via a crafted URL to the Agent (Agent.Control) ActiveX control, leading to an overflow within the Agent Service (agentsrv.exe) process. Users with fewer user rights on the system could be less impacted than those operating with administrative user rights.

Recommendations: For Microsoft Agent version 2.0.0.3425, consider restricting access to the Agent Service (agentsrv.exe) process until a patch is available. As a temporary workaround, avoid using the Agent (Agent.Control) ActiveX control with crafted URLs.

Exploit

Correção

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-3040

Produtos afetados

Agent

Windows

Referências · 19

• 🔥 https://exploit-db.com/exploits/30567 · Exploit
• http://securitytracker.com/id?1018677 · Nota
• http://frsirt.com/english/advisories/2007/3113 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3040 · Nota de Segurança
• http://kb.cert.org/vuls/id/716872 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3040 · Nota de Segurança
• http://secunia.com/advisories/26753 · Aviso do Fabricante
• http://securityfocus.com/bid/25566 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-051 · Aviso do Fabricante
• https://docs.microsoft.com/security-updates/securitybulletins/2007/MS07-051 · Nota
• http://vupen.com/english/advisories/2007/3113 · Aviso do Fabricante
• http://securityfocus.com/archive/1/archive/1/479096/100/0/threaded · Nota
• http://securityfocus.com/archive/1/479096/100/0/threaded · Nota
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=592 · Nota
• http://osvdb.org/36934 · Nota