PT-2007-2630 · Microsoft · Windows 2000+4

Carsten Eiram + 1 · Published 2007-04-10 · Updated 2018-10-16 · CVE-2007-1205

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Agent versions in Windows 2000 SP4, XP SP2, and Server 2003, 2003 SP1, and 2003 SP2

Description A remote code execution issue exists in the way Microsoft Agent handles certain specially crafted URLs, resulting in memory corruption. This allows remote attackers to execute arbitrary code.

Recommendations For Windows 2000 SP4, XP SP2, and Server 2003, 2003 SP1, and 2003 SP2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-1205

Affected Products

Agent

Windows

Windows 2000

Windows Server 2003

Windows Xp

References · 14

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1205 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-020 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1205 · Security Note
• http://securityfocus.com/archive/1/466331/100/200/threaded · Vendor Advisory
• http://securityfocus.com/archive/1/465235/100/0/threaded · Note
• http://secunia.com/secunia_research/2006-74/advisory · Note
• http://kb.cert.org/vuls/id/728057 · Note
• http://securitytracker.com/id?1017896 · Note
• http://secunia.com/advisories/22896 · Note
• http://us-cert.gov/cas/techalerts/TA07-100A.html · Note
• http://vupen.com/english/advisories/2007/1324 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2034 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2007/ms07-020 · Note
• http://securityfocus.com/bid/23337 · Note