PT-2007-4332 · Microsoft · Agent+1

Yamata Li · Published 2007-09-11 · Updated 2018-10-16 · CVE-2007-3040

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Microsoft Agent version 2.0.0.3425

Description: A stack-based buffer overflow issue exists in the way Microsoft Agent handles certain specially crafted URLs, allowing remote attackers to execute arbitrary code. This issue is triggered via a crafted URL to the Agent (Agent.Control) ActiveX control, leading to an overflow within the Agent Service (agentsrv.exe) process. Users with fewer user rights on the system could be less impacted than those operating with administrative user rights.

Recommendations: For Microsoft Agent version 2.0.0.3425, consider restricting access to the Agent Service (agentsrv.exe) process until a patch is available. As a temporary workaround, avoid using the Agent (Agent.Control) ActiveX control with crafted URLs.

Exploit

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-3040

Affected Products

Agent

Windows

References · 19

• 🔥 https://exploit-db.com/exploits/30567 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-3040 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3040 · Security Note
• http://secunia.com/advisories/26753 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-051 · Vendor Advisory
• http://vupen.com/english/advisories/2007/3113 · Vendor Advisory
• http://securitytracker.com/id?1018677 · Note
• http://frsirt.com/english/advisories/2007/3113 · Note
• http://kb.cert.org/vuls/id/716872 · Note
• http://securityfocus.com/bid/25566 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2007/MS07-051 · Note
• http://securityfocus.com/archive/1/archive/1/479096/100/0/threaded · Note
• http://securityfocus.com/archive/1/479096/100/0/threaded · Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=592 · Note
• http://osvdb.org/36934 · Note