Executive Summary
| Summary | |
|---|---|
| Title | Vulnerability in Microsoft Agent Could Allow Remote Code Execution (932168) |
| Informations | |||
|---|---|---|---|
| Name | MS07-020 | First vendor Publication | 2007-04-10 |
| Vendor | Microsoft | Last vendor Modification | 2007-04-10 |
| Severity (Vendor) | Critical | Revision | N/A |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 9.3 | Attack Range | Network |
| Cvss Impact Score | 10 | Attack Complexity | Medium |
| Cvss Expoit Score | 8.6 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| This update resolves a newly discovered, privately reported vulnerability. The vulnerability is documented in its own subsection in the Vulnerability Details section of this bulletin. We recommend that customers apply the update immediately. |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:2034 | |||
| Oval ID: | oval:org.mitre.oval:def:2034 | ||
| Title: | Microsoft Agent URL Parsing Vulnerability | ||
| Description: | Unspecified vulnerability in Microsoft Agent (msagent\agentsvr.exe) in Windows 2000 SP4, XP SP2, and Server 2003, 2003 SP1, and 2003 SP2 allows remote attackers to execute arbitrary code via crafted URLs, which result in memory corruption. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2007-1205 | Version: | 6 |
| Platform(s): | Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 | Product(s): | |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 34009 | Microsoft Windows Agent URL Parsing Memory Corruption |
Information Assurance Vulnerability Management (IAVM)
| Date | Description |
|---|---|
| 2007-04-12 | IAVM : 2007-A-0021 - Microsoft Agent URL Parsing Remote Code Execution Vulnerability Severity : Category II - VMSKEY : V0013934 |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2014-01-10 | Microsoft Agent v1.5 ActiveX function call access RuleID : 8856 - Revision : 12 - Type : BROWSER-PLUGINS |
| 2014-01-10 | Microsoft Agent v1.5 ActiveX clsid unicode access RuleID : 8855 - Revision : 7 - Type : WEB-ACTIVEX |
| 2014-01-10 | Microsoft Agent v2.0 ActiveX function call access RuleID : 8854 - Revision : 14 - Type : BROWSER-PLUGINS |
| 2014-01-10 | Microsoft Agent v2.0 ActiveX clsid unicode access RuleID : 8853 - Revision : 8 - Type : WEB-ACTIVEX |
| 2014-01-10 | Microsoft Agent v2.0 ActiveX clsid access RuleID : 8852 - Revision : 15 - Type : BROWSER-PLUGINS |
| 2014-01-10 | Microsoft Agent Custom Proxy Class ActiveX clsid unicode access RuleID : 8851 - Revision : 7 - Type : WEB-ACTIVEX |
| 2014-01-10 | Microsoft Agent Custom Proxy Class ActiveX clsid access RuleID : 8850 - Revision : 13 - Type : BROWSER-PLUGINS |
| 2014-01-10 | Microsoft Agent Notify Sink Custom Proxy Class ActiveX clsid unicode access RuleID : 8849 - Revision : 7 - Type : WEB-ACTIVEX |
| 2014-01-10 | Microsoft Agent Notify Sink Custom Proxy Class ActiveX clsid access RuleID : 8848 - Revision : 13 - Type : BROWSER-PLUGINS |
| 2014-01-10 | Microsoft Agent Character Custom Proxy Class ActiveX clsid unicode access RuleID : 8847 - Revision : 7 - Type : WEB-ACTIVEX |
| 2014-01-10 | Microsoft Agent Character Custom Proxy Class ActiveX clsid access RuleID : 8846 - Revision : 13 - Type : BROWSER-PLUGINS |
| 2014-01-10 | Microsoft Windows Agent v1.5 ActiveX clsid access RuleID : 4172 - Revision : 15 - Type : BROWSER-PLUGINS |
| 2014-01-10 | Microsoft Windows Agent Control ActiveX clsid access RuleID : 12448 - Revision : 19 - Type : BROWSER-PLUGINS |
| 2014-01-10 | Microsoft Agent v1.5 ActiveX function call unicode access RuleID : 10465 - Revision : 7 - Type : WEB-ACTIVEX |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2007-04-10 | Name : Arbitrary code can be executed on the remote host through the web or email cl... File : smb_nt_ms07-020.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2014-02-17 11:45:39 |
|
| 2014-01-19 21:30:04 |
|
| 2013-11-11 12:41:05 |
|
| 2013-05-11 12:21:59 |
|
